The emudhra certificate problem means that people can potentially man in the middle https. Make sure you update everything including apps like termux

To test if impacted visit or curl this site: https://emudhra.we-have-a-problem.com/

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 6 points 1 week ago (5 children)

That only covers mainstream web browsers

Any apps that rely on https will be vulnerable

  • source
  • parent
  • hideshow 5 child comments
  • [–] 4 points 1 week ago (3 children)

    The vast majority of app network requests would be secured by getting the TrustStore patch via Play Services, with only exceptions shipping their own crypto stack needing to update to be secured.

    Still, updating your apps regularly is good practice that you should follow anyway

  • source
  • parent
  • hideshow 3 child comments
  • [–] [S] 2 points 1 week ago (2 children)
  • [–] 2 points 1 week ago

    Apps using system webview are already mitigated. Apps using system HTTPS connection protocols and SSL libraries are also mitigated. Now, for some apps which ship and use their own SSL library and do not use google safe browsing or update the cert list online they could be vulnerable.

  • source
  • parent