Mailing-List: contact issues-help@cordova.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cordova.apache.org
Date: Wed, 30 Apr 2014 16:06:18 +0000 (UTC)
From: "Marcel Kinard (JIRA)" <jira@apache.org>
To: issues@cordova.apache.org
Message-ID: <JIRA.12649223.1369351635704.207143.1398873978090@arcas>
In-Reply-To: <JIRA.12649223.1369351635704@arcas>
References: <JIRA.12649223.1369351635704@arcas>
Subject: [jira] [Commented] (CB-3498) Certificate Pinning
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/CB-3498?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13985661#comment-13985661 ] 

Marcel Kinard commented on CB-3498:
-----------------------------------

The current webview in Android does not provide a way to do certificate pinning. See http://markmail.org/message/fqiu4ot3kvsuj5na

So though in theory it would be possible to add this to iOS, having it on one major platform and not another kinda breaks the idea of cross-platform consistency of Cordova apps.

This is not being actively worked, primarily for this reason.

> Certificate Pinning
> -------------------
>
>                 Key: CB-3498
>                 URL: https://issues.apache.org/jira/browse/CB-3498
>             Project: Apache Cordova
>          Issue Type: Wish
>          Components: Android, iOS
>    Affects Versions: 2.7.0
>            Reporter: mgill
>            Priority: Minor
>              Labels: certificate, security
>
> It would be a handy feature to have certificate pinning supported
> Examples:
>     https://github.com/iSECPartners/ssl-conservatory/tree/master/ios
>     https://github.com/moxie0/AndroidPinning


--
This message was sent by Atlassian JIRA
(v6.2#6252)