..or you have a known safe channel (such as adb or local
secured/trusted wifi) you can use to get the cert the first time.

And what does that have to do with "how do I do this" anyway?

On Mon, May 25, 2009 at 11:02 AM, Mike Hearn <[email protected]> wrote:
>
>> The server and url in question is private and no one apart from myself
>> will ever use it. Personally, I can't see the point of getting a
>> proper signed certificate for this.
>
> Well, read the link I sent. If you're using encryption, presumably
> you're worried about somebody attempting to snoop your traffic. If
> you're worried about that, then self-signed certificates are something
> to avoid, unless you can hard code the certificate in your app then
> check it against what the WebView received, but i'm not sure there's
> an API for that. If you're not worried about MITM attacks then you
> don't need encryption (bear in mind 3G is already encrypted).
> >
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to