wimpie3 Well-Known Member Licensed User Longtime User Jul 19, 2016 #1 I communicate with my server using okhttp and a https connection. Using a man-in-the middle certificate, the traffic can be decrypted. One way to prevent this is to use certificate pinning in your Android application (https://www.owasp.org/index.php/Certificate_and_Public_Key_Pinning). Did anyone already do this? Basically you must teach HttpsURLConnection to trust a specific set of CAs.
I communicate with my server using okhttp and a https connection. Using a man-in-the middle certificate, the traffic can be decrypted. One way to prevent this is to use certificate pinning in your Android application (https://www.owasp.org/index.php/Certificate_and_Public_Key_Pinning). Did anyone already do this? Basically you must teach HttpsURLConnection to trust a specific set of CAs.
fixit30 Active Member Licensed User Longtime User Jul 19, 2016 #2 Take a look at this thread. https://www.b4x.com/android/forum/threads/okhttp-set-parameter-with-inline-java.64748/ Upvote 0
Take a look at this thread. https://www.b4x.com/android/forum/threads/okhttp-set-parameter-with-inline-java.64748/
