Feature Request: set security protocol used by dart http client for https connections

[proneotiv]

In my company, we are creating a medical device (app) with dart (flutter) and we are required by law, to specifically allow only one certain type of security protocol (in out case TLS 1.2). When any other type of security protocol is used (e.g. TLS 1.3) connections should be declined by the client.

Wha this feature request desires:

• a way to explicitly set or whitelist a sepcific security protocol type.
• the http client should only allow connections that use that specific security protocol type.
• connections that use any other security protocol types should be declined by the http client.

I used this feature before in mobile app created with unity and C#. In C#, there is a class called ServicePointManager where you can sepcify a specific security protocol via an SecurityProtocolType enum. Maybe there is a way to do something similar with dart (See C# references below).

• https://docs.microsoft.com/en-us/dotnet/api/system.net.servicepointmanager?view=net-5.0
• https://docs.microsoft.com/de-de/dotnet/api/system.net.securityprotocoltype?view=net-5.0

I have not yet found a way to do this wit dart, that is why I created this feature request. According to this issue, it is not supported by the dart language at the moment: https://github.com/dart-lang/sdk/issues/37173

We are currently using flutter version 1.22.6 with dart sdk version 2.10.5 but will be upgrading to flutter 2.0+ soon. As flutter uses the dart http client, I understand this issue to be a dart lang issue and not a flutter issue.

As mobile developers we are developing on Mac and Windows for Android and iOS.

Thank you in advance for your help!

[centerboy88]

we need that exact the same way - good approach

[centerboy88]

any news on this feature request ?