
On grapheneOS, i just manually disabled the root CA's in the trusted root store.
These are all android versions on graphene:
*There are now 14 certs
AFFECTED:
Firefox (nightly) ,Ironfox, and fennec STILL connects to all 12
Tor connects to 6 of them
Cromite is still affected by 6 of them.
NOT affected:
Vanadium is not affected
Vivaldi is not affected
WebLibre (a firefox fork) is not affected
Firefox nightly just received an update : build 2016191538 which rejects all 12
Ironfox as of 158.0.1 (Build #2016191578) is no longer affected.
Tor is fixed as of 15.0.26 (140.17.0esr) (Build #2016191530)
Fennec all clear
