[guardian-dev] NetCipher Book Chapter, and HTTP Stack Integration

[Mark Murphy]

On Thu, Feb 25, 2016, at 08:40, Hans-Christoph Steiner wrote:
> So I guess the key bit there in terms of making the Intent start Orbot
> not matter what its state is the Intent.setComponent() call?

Sorry, you lost me there.

> I could make sense to make NetCipher work well
> with AndroidPinning, but even better would be to have a full
> pinning/TOFU support built-in.

The choice of GPLv3 for a library, while honorable, won't be popular
among Android developers that pay attention to licenses.

> Here's the archtecture for that that
> I've been working on over the years:
> 
> https://dev.guardianproject.info/projects/bazaar/wiki/Chained_TLS_Cert_Verification

In a related area, I have TrustManagerBuilder in CWAC-Security:

https://github.com/commonsguy/cwac-security/blob/master/TrustManagerBuilder.markdown

-- 
Mark Murphy (a Commons Guy)
https://commonsware.com | https://github.com/commonsguy
https://commonsware.com/blog | https://twitter.com/commonsguy