Skip to content
Certificate Error Mishandling: Misuse and Abuse of the SslErrorHandler Class
bughunters.google.com | blog | #vulnerability-research | #secure-coding | #android | #tls | #ssl | #webview | #certificate-handling
Summary
How Android developers misuse the WebView SslErrorHandler class when handling TLS certificate errors, why these mistakes create serious vulnerabilities, and how the class is meant to be implemented.
- Published
- Collected