[guardian-dev] NetCipher: StrongTrustManager status?
mmurphy at commonsware.com
Fri Mar 21 19:15:35 EDT 2014
Hi! What's the status of NetCipher? I see that there was a 1.1 tag
applied a few days ago.
- What is the status of StrongTrustManager? The README indicates that it
was removed, but the code is still there.
- The README indicates that StrongTrustManager works with
MemorizingTrustManager, by which I assume you mean
https://github.com/ge0rg/MemorizingTrustManager. Any notes on how best
to combine these?
- The 1.1 release just contains the source tarball/zipball. Are you
planning on releasing this as an AAR? I'm assuming that a JAR is out of
the question, since the library contains resources.
- I notice that the sample only uses StrongHttpsClient. I was planning
on using StrongSSLSocketFactory with OkHttp, since HttpClient is no
longer recommended on Android. Are there any notes anywhere about how
best to set up StrongSSLSocketFactory?
I ask, because it's high time for me to start adding complex SSL samples
to my book, and I'm trying to determine to what extent I should be
pointing people at StrongTrustManager to help with any of that. Plus, I
have a security presentation in London in a little bit, and I'm trying
to determine how to position NetCipher in that talk.
Also, one technical comment on the README: towards the bottom, it has
"If you are targetting android-13 as the minimum...". That probably
should be "If your build target is API Level 13 or higher", as the
screenSize value for android:orientation only requires that you be
compiling against a high enough build target. android:minSdkVersion does
not matter, nor does android:targetSdkVersion, and the verb "targetting"
is a bit vague as a result.
Of course, even better would be to get rid of the android:configChanges
requirement in the first place... :-)
Mark Murphy (a Commons Guy)
http://commonsware.com | http://github.com/commonsguy
http://commonsware.com/blog | http://twitter.com/commonsguy
_The Busy Coder's Guide to Android Development_: Version 5.6... 174
More information about the Guardian-dev