Sept 2021 / Cert / firefox

[mitchell4you]

Interesting topic on Steve Gibson podcast / YouTube (Security now Slipstream )
https://www.grc.com/SecurityNow.htm ( currently not yet uploaded nov10 )

Issue... All android version older then 8
Will no longer connect to SSL sites.. because the Site root Cert on Android will be to old ( certificate will expired on okt 2021 )

The only solution would be to use Firefox mobile as it comes with its own Cert ( and supports android 5 and higher )

Cheers

[RiCkLaR_atvX]

From what I read briefly on the subject I believe the cutoff is at Android Nougat 7.1 not Oreo 8.

Haven't dug deeper on the issue, but I think this also only concerns AOSP firmwares of Android that run an outdated Android Webview which doesn't get updates, and if the device's ROM is upgraded or modified to run with Google Webview where it can receive updates through the Google Play Store then it will have the current Certs.

[mitchell4you]

More info:

https://www.zdnet.com/article/older-android-phones-will-start-failing-on-some-secure-websites-in-2021/

[mitchell4you]

Looks like.. the issue got resolved:
https://www.androidpolice.com/2020/1...ys-workaround/

this is great news

[QUOTE]This isn't a forever solution, as the new cross-signing arrangement is only good until 2024, [/QUOTE]