Re: [android-security-discuss] Re: How does Android EditText store the content internally

2011-08-30 Thread Quentin Lefebvre
On 30/08/2011 00:28, Chris Stratton wrote : On Saturday, August 27, 2011 1:53:12 PM UTC-4, KK wrote: I have an android EditText which holds a password. I have to retrieve this in one of my modules and pass it to another. I am calling EditText.getEditableText and encrypting its

Re: [android-security-discuss] Re: How does Android EditText store the content internally

2011-08-30 Thread Kevin Chadwick
On Tue, 30 Aug 2011 08:12:18 -0700 (PDT) Chris Stratton cs07...@gmail.com wrote: However, there are a few obvious things you can avoid, such as writing out plaintext information to an sqlite database. If your just confirming the password entered is correct then you can one way hash it with

Re: [android-security-discuss] Android's root CA certificates list

2011-08-30 Thread Brian Carlstrom
If you want to request CA inclusion, please file a request at: http://code.google.com/p/android/issues/list -bri On Tue, Aug 30, 2011 at 12:47 AM, Adriano asanton...@gmail.com wrote: Hi all, can someone explain the process for inclusion of additional Root CA certificates in Android? Does

[android-security-discuss] Re: OCSP/CRL support during SSL

2011-08-30 Thread Pandit
It just occurs again recently with another CA vendor was broken in again (DigiNotar). Having OCSP/CRL will help. I have a question. Does Android's Web browser support OCSP/CRL? Thank you, -Pandit On Aug 21, 11:37 pm, Miles miles_christ...@yahoo.com wrote: Just wanted to confirm if it does.  

Re: [android-security-discuss] Re: OCSP/CRL support during SSL

2011-08-30 Thread Chris Palmer
Having OCSP/CRL will help. Actually, that is not at all clear. http://www.imperialviolet.org/2011/03/18/revocation.html http://www.ietf.org/mail-archive/web/websec/current/msg00296.html Compound the generally low reliability and performance of CAs' OCSP and CRL endpoints, multiply that times