Suggestion: add in account settings a way to display server certificate data (md5 and sha1 fingerprints, issue and valid-until date)

przybylski / owncloud-android

18 stars 8 forks source link

Suggestion: add in account settings a way to display server certificate data (md5 and sha1 fingerprints, issue and valid-until date) #38

Closed Wikinaut closed 11 years ago

Wikinaut commented 11 years ago

To improve security, add in the account specific settings (per server)

display server certificate data (md5 and sha1 fingerprints, issue and valid-until date)

Wikinaut commented 11 years ago

Such a change was recently proposed to the Window client and is now in.

przybylski commented 11 years ago

in progress on SSL_warning_in_synch branch

Wikinaut commented 11 years ago

I just observed, that the 1.3.15 version ( https://github.com/owncloud/android/commit/b83064eb8326c38d7c7e4a154abb1becbda72d48 ) does show the key data, but not the

md5 and sha1 fingerprints of the certificate.

This is what I originally suggested and is more important to have, because it allows a quicker check. Checking the whole certificate (as a first step to check) does not make much sense.