Enterprise version. Prevent accepting user certificates when checking secure connections. about flowcrypt-android HOT 4 CLOSED

In that case, I propose to leave it as-is for now.
Maybe on managed devices, a user can't add a custom cert manually. But again, I'm not sure. It's not a common case.

Yes, let's leave it as is. I think it should be possible to prevent users from adding custom certificates in Android enterprise configuration.

from flowcrypt-android.

@sosnovsky Please look at this one. Maybe it will be better to disallow use of user-defined system SSL certs for the enterprise version. For security reasons.

from flowcrypt-android.

@sosnovsky Please look at this one. Maybe it will be better to disallow use of user-defined system SSL certs for the enterprise version. For security reasons.

Will it still allow to use custom SSL certs provided by admins? (https://developers.google.com/android/work/requirements#4.8.-certificate-management_1)
As I think it should be common for large companies to have their own certificates for accessing internal resources.

from flowcrypt-android.

Will it still allow to use custom SSL certs provided by admins? (https://developers.google.com/android/work/requirements#4.8.-certificate-management_1)

I'm not sure as I can't test it. If these certs will be identified as system certs - maybe. Only real testing can say.

As I think it should be common for large companies to have their own certificates for accessing internal resources.

In that case, I propose to leave it as-is for now.

Maybe on managed devices, a user can't add a custom cert manually. But again, I'm not sure. It's not a common case.

from flowcrypt-android.