Project

General

Profile

Forums » Privacy Browser Android Forum »

[Feature Request] Add SSL Cert SHA-256 / SHA-1 Info?

Added by Loni D over 3 years ago

Hi,

I am authenticating my connections to various sites by confirming their SSL certificate fingerprint using https://www.grc.com/fingerprints.htm.

GRC manually checks the SSL fingerprint of a given website, and returns its authenticated SHA-256 and SHA-1 hash value. However, when I check the SSL certificate in Privacy Browser neither values (SHA-256 or SHA-1) are listed, so a quick comparison of the SSL certificate against the authenticated information from GRC cannot be done.

Is it possible to add the SHA-256 and SHA-1 to the SSL certification tab info?

As always great app, awesome work, and super-glad I found ya! :)


Replies (4)

RE: [Feature Request] Add SSL Cert SHA-256 / SHA-1 Info? - Added by Soren Stoutner over 3 years ago

You think about these things the same way I do. :)

This would already be implemented if Android's WebView exposed the necessary information. There is an existing feature request to display the certificate hash values once Privacy WebView is implemented with the 4.x series.

https://redmine.stoutner.com/issues/208

RE: [Feature Request] Add SSL Cert SHA-256 / SHA-1 Info? - Added by Loni D over 3 years ago

I look forward to the 4.x release. Even still, I wonder if the SSL certificate fingerprint could be spoofed on the browser side if implemented?

I'm not a Developer, so please pardon the layman's question here - is it possible to pull the SSL certificate fingerprint info from the same source as the grc.com website?

Anyhoo, as always great app as is, SSL cerficate info or not. :)

RE: [Feature Request] Add SSL Cert SHA-256 / SHA-1 Info? - Added by Loni D over 3 years ago

OK...egg on face. My above question is answered in the link you provided...read first, then ask questions, lol.

    (1-4/4)