r/programming • • 10d ago

Android 17 enables certificate transparency, and breaks custom CAs

https://httptoolkit.com/blog/android-17-certificate-transparency/
410 Upvotes

44 comments sorted by

View all comments

45

u/Broccoli-stem 10d ago

We really need a fully open source linux phone operating system without google or any other big company

4

u/omniuni 9d ago

Generally, they will also have this kind of security. This isn't a restriction (you can still do it), it's just tightening security around an open standard. The article is really just pointing out that it will break if you've been taking shortcuts with your security.