Shulou(Shulou.com)11/24 Report--

CTOnews.com Root certificates are at the heart of Public Key Infrastructure (PKI) and must be signed by a trusted Certificate Authority (CA) to be valid. Both apps and browsers can update root certificates, but Android phones can only be updated via OTA upgrades at present. This may change in the upcoming Android 14.

CTOnews.com learned that every operating system has its own root certificate built in, and Android is no exception. You can view the root certificate on your Android phone by navigating to the Security and Privacy option in the Settings app.

But the problem is that this root store is not omnipotent. Applications can choose to use and trust their own root store (Firefox does this), and they can accept only certain certificates (called certificate fixing) to avoid man-in-the-middle (MITM) attacks. Since Android 7, users can also install their own certificates, and developers can choose to allow their apps to use them.

According to a new proposal on AOSP Gerrit, Conscrypt is a Mainline module that provides Android's TLS implementation and will support updateable root certificates in future updates. This means that certificates can be removed (or even added) via Project Mainline's Google Play system update to ensure that other situations such as TrustCor can be processed faster in the future.

With the introduction of this feature, Google can update the root certificate in a timely manner without relying on the OEM to push updates to make the device more secure.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.