[guardian-dev] NetCipher and HttpURLConnection

Josh Steiner josh at vitriolix.com
Wed Feb 12 14:57:08 EST 2014

Turns out SOCKS support is totally busted for HttpURLConnection* on
Android.  We'll test OkHTTP to see if it works out better for us:


(*pet peeve, why isn't it HTTPURLConnection, or even HttpUrlConnection?!?)

On Tue, Feb 11, 2014 at 11:59 AM, Mark Murphy <mmurphy at commonsware.com> wrote:
> On Tue, Feb 11, 2014, at 11:54, Josh Steiner wrote:
>> Interesting, I'll see what I can dig up on that. If HttpURLConnecction*
>> is
>> better in this regard, would you prefer to drop Apache support or to keep
>> both as an option? It is nice to have both if you are integrating with
>> 3rd
>> party libs where you can't control what they decided to use, but if its a
>> gaping security hole we might not want to endorse it.
> FWIW, AFAIK, the implementation of HttpUrlConnection changed in Android
> 4.4 to be more or less a clone of Square's OkHTTP:
> http://square.github.io/okhttp/
> That was mostly for SPDY support, as I understand it.
> I mention it, as the behavior of HttpUrlConection may have changed in
> Android 4.4 with respect to things like SOCKS. Also, if you determine
> that OkHTTP/4.4's HttpUrlConnection is significantly better, developers
> can use OkHTTP on older Android devices to have an
> HttpUrlConnection-compatible API.
> --
> Mark Murphy (a Commons Guy)
> http://commonsware.com | http://github.com/commonsguy
> http://commonsware.com/blog | http://twitter.com/commonsguy
> _The Busy Coder's Guide to Android Development_: Version 5.5... And
> Still Going Strong!
> _______________________________________________
> Guardian-dev mailing list
> Post: Guardian-dev at lists.mayfirst.org
> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
> To Unsubscribe
>         Send email to:  Guardian-dev-unsubscribe at lists.mayfirst.org
>         Or visit: https://lists.mayfirst.org/mailman/options/guardian-dev/josh%40vitriolix.com
> You are subscribed as: josh at vitriolix.com

More information about the Guardian-dev mailing list