[olug] Cert Tapioca transparent network proxy finds 23, 667 Android apps that fail to validate SSL

Aric Aasgaard aric at omahax.com
Mon Mar 2 14:50:02 CST 2015


Nevermind.  https://www.ricoh.com uses the DigiCert SAN cert and
https://ricoh uses an untrusted cert from Symantec.

-----Original Message-----
From: Aric Aasgaard [mailto:aric at omahax.com] 
Sent: Monday, March 2, 2015 2:39 PM
To: 'Omaha Linux User Group'
Subject: RE: [olug] Cert Tapioca transparent network proxy finds 23, 667
Android apps that fail to validate SSL

Nice!  
https://ricoh.com/

It is now showing as "This Connection is Untrusted" in Firefox.

It wasn't that way when I noticed the shady cert from my phone packet
capture a few days ago.

This is also interesting.
http://google.com/safebrowsing/diagnostic?site=cdngc.net/




More information about the OLUG mailing list