Questions tagged [https]
The https tag has no usage guidance.
35
questions with no upvoted or accepted answers
6
votes
0
answers
2k
views
How to remember/cache a client certificate
I support a web-application that requires an https connection with client certificates as part of the authentication scheme. On most browsers (Desktop clients, iOS Safari, etc) if you are prompted for ...
- 161
3
votes
0
answers
204
views
Cannot add new Certificates to Android Device
Using a Pixel 6a, running Android 13.
I am trying to install certificates from a private CA I have established on the internal network. I was able to install the root certificate by doing the ...
- 31
3
votes
1
answer
419
views
How can I view a TLS 1.2 only website on an outdated tablet?
I have a tablet from 2011 (Prestigio MultiPad PMP3384B) with Android 2.3 which I use occasionally. I’ve experienced recently that I cannot view some webpages (https://www.nytimes.com/, for example) as ...
- 131
2
votes
0
answers
801
views
Shortening URLs using goo.gl and Tasker
I'm trying to use Tasker to shorten URLs. Previously, I don't think this was possible, but v1.3 added support for https.
I've tried following the instructions here: https://developers.google.com/url-...
- 129
1
vote
0
answers
459
views
HttpCanary target app uses a non system certificate
I'm looking for a way to bypass a target app using a non-system certificate. The HttpCanary app itself does give a 'solution' however it's incredibly unclear:
Goto Settings->HttpCanary root CA ...
- 11
1
vote
0
answers
393
views
Legacy Android 4.0 CA-Certificates Update
I have two legacy Android 4.0 Garmin Monterra devices.
It's not possible anymore to open the google play store or some websites.
When I open most of the websites with chrome I receive a SSL error 107. ...
- 11
1
vote
0
answers
1k
views
HTTP/HTTPS Transparent Proxy on Android
So on linux, I use transparent mode of mitmdump (mitmproxy without interaction) to build a websites filter and I run it as root on startup so that it cannot be killed if the user does not have sudo ...
- 11
1
vote
0
answers
1k
views
Cannot connect to HTTPS sites due to device clock being ahead
I cannot access 'My Search.com' I just set as my homepage (Brave browser) and Yandex for my search engine (new install). I got an error saying that my (device) time is ahead.
Your clock is ...
greylady
1
vote
0
answers
868
views
Bypassing certificate pinning with integrity checks on Android 7 (Nougat) or newer
How can I bypass Certificate Pinning, or bypass SSL verification entirely, in an Android app on Android 7 or newer that has a built-in hash 'integrity check' to rule out APK modification?
Here is a ...
- 111
1
vote
0
answers
1k
views
Can't visit " https " sites with an Android device using Wi-Fi
I have a strange problem on one of my old phones. I have an old Android device running Android 2.3.4, and it works perfectly. But, I found that, it can't access to https sites with the basic browser ...
user228883
1
vote
0
answers
131
views
Removed trusted CA's now can't use Google.........Anything!
My boyfriend accidently hit the 'Remove all stored credentials' and now he can not access anything Google, but most importantly the Play Store.
OK it might have been on purpose, don't ask, but now it'...
1
vote
0
answers
798
views
How are certs validated against default trust store?
Through some reading, I have a fairly rough understanding about how https works with Android apps, especially how are certificate validations done. Some of the resources that I referred to for gaining ...
- 111
1
vote
0
answers
187
views
Why is Chrome on Android sending my HTTP requests to an IP owned by DoD?
When I make http requests to my website with Chrome Browser on android 6.0 (Nexus6) I saw that it is making requests to 130.90.151.44 instead of the IP of my webserver.
If I use another browser, it ...
- 11
1
vote
0
answers
1k
views
Why won't my Android phone access any HTTPS websites through WiFi?
My Samsung Galaxy Note 3 can not access any secured website while connected via my home WiFi – even applications like Google Search and Facebook can't access the internet and give an error saying "...
- 111
1
vote
0
answers
234
views
remove RC4 from SSL/TLS ciphers
is there a way to remove RC4 from SSL/TLS ciphers in android system wide such that also apps and not only the browser doesn't use them anymore?
Thanks
- 101
1
vote
0
answers
919
views
Unable to open Google's secure websites over HTTPS
I can easily open https secured sites on my Win7 laptop (using Google Chrome).
But this is not possible with Chrome version 18.0.1025308 on my ONDA VI30W tablet (running ICS 4.0.3).
What do I need to ...
- 11
0
votes
0
answers
51
views
Android 7 breaks certificates on Samsung Browser and in Whatsapp
On a Samsung S6 Plus Edge running on Android 7, certain security certificates will break since September 2021: the workaround which Let's Encrypt implemented doesn't seem to work in Samsung Internet. ...
- 111
0
votes
0
answers
25
views
Is there a way that I can "share" images by sending them to an HTTP endpoint?
I want to make some hacky prototypes where I use my phone to collect data and then process it with a regular program. For this I want to share images with an HTTP endpoint written by me to execute ...
- 101
0
votes
0
answers
1k
views
Installing Charles proxy certificate on Samsung
I have a problem with Charles proxy certificate on Samsung phone. On Xiaomi everything works fine. But when I try to decrypt traffic on my Samsung device I can't do it - SSL handshake with client ...
- 101
0
votes
0
answers
582
views
Sniff Android protected app HTTPS requests
I am going to capture an app's HTTPS request to get its Login API.
I am using Fiddler. When inputting the username and password and pressing sign in, the app is working. But in Fiddler, I can not find ...
- 1
0
votes
0
answers
355
views
Android 10 user CA file not being used in apps
I'm using an ISP that does internet filtering for me, I have install their CA file, and it works in the browser, and used to work in all apps.
After the latest update for Xiaomi Redmi Pro 9, Youtube, ...
- 101
0
votes
0
answers
234
views
import pem file containing multiple CA certs
Using Samsung S4, Android 5.0.1, not rooted.
Recently I have found at least two websites that the Chrome browser on Android 5.0.1 reports https is not secure. This is because the phone does not have ...
- 121
0
votes
0
answers
40
views
Is it possible to have shell access to Trusted Certificates
I have an Android Application that launches Python via JNI. Inside of Python I have web requets that I make, some need to be secure. I can configure the APK to be able to access a User CA certificate, ...
- 101
0
votes
0
answers
46
views
Changing third-party websites on android device without browser extensions available
I'm searching a way on how to change behavior of some website in mobile browser.
For example:
Remove annoing Ad (specific one)
Change some elements on a website, to make it easier to read on small ...
- 101
0
votes
0
answers
43
views
Montoring network traffic on Android phone (for research user study)
For context: We would like to analyze user mobile online (browsing) behavior in a user study. The study has been approved by our university's IRB, participants will have to give informed consent and ...
- 101
0
votes
0
answers
411
views
Connecting to own proxy with self-made CA certificate not (properly) working
I have a Squid proxy installed with HTTPS/SSL support. When I install the generated CA certificate in Firefox and set the proxy, everything looks good -- that is, I can see all the HTTP(S) requests ...
- 101
0
votes
0
answers
2k
views
SSL certificates not updated on old Android
I have an old Android smartphones. More and more websites stop working because my chrome browser doesn't trust the root CA (Outdated or missing CA certificates). Obviously the root CA list is only ...
0
votes
0
answers
189
views
Why I couldn't monitor traffic from this page?
When I opened the capture log I found nothing from the page other than this when I first tried to visit it using http only, and then I get that security warning and i click proceed to unsafe anyway i ...
- 219
0
votes
1
answer
117
views
HTTPS websites slow on Phone
I am trying to investigate why our Phones are experiencing slow browsing to HTTPS sites.
It happens only the first time after the phone in question has been locked for a couple of minutes or more.
So ...
CKA
0
votes
0
answers
62
views
Does anyone know what this android emulator call is?
I've been looking at the network traffic for an Android emulator using mitm proxy. I have noticed large amounts of traffic going to google's servers. Does anyone know what this request would carry ...
- 233
0
votes
1
answer
119
views
Watch whether an app uses TLS
I'd like to inspect the network usage of my apps (e.g., a banking app) to determine the security protocols they employ (if HTTPS: TLS layer version, encryption protocol, key size, signature algorithm, ...
- 101
0
votes
1
answer
594
views
HTTPS sites no longer load on my Android after installing cert to truststore
I have a rooted Android 4.3 JellyBean. I was testing something and trying to install the certificate for Charles Proxy so I could sniff some SSL traffic. I was able to push the Charles certificate to /...
- 121
0
votes
1
answer
143
views
Is K-9 Mail susceptible to MITM attacks?
I am using K-9 Mail on Android and have set the SSL option to 'SSL (strict)'.
My understanding is that with this option K-9 definitely requires a valid SSL certificate which is issued by a trusted CA,...
0
votes
1
answer
2k
views
Can't open non HTTPS websites on mobile network. (Android Lollipop on Nexus 5, Nexus 4)
I recently updated my Nexus 5 to Lollipop. The problem is that when I am on a mobile network, I can ONLY open HTTPS websites. All the HTTP websites appear as a blank white page. When I am on WiFi, ...
0
votes
1
answer
689
views
Is there any method through which I can make the YouTube app use https connections instead of http?
Well the question describes the problem.
I know that the YouTube app is not using secure connections, and I want to force the YouTube app to use secure connections. Can this be done?
- 113