zom / Zom-iOS-XMPP

THIS PROJECT IS NOW CLOSED. WE HAVE MOVED TO A NEW ZOM 2.0 MATRIX CORE. FOLLOW THE LINK!
https://github.com/zom/zom-ios-matrix
Mozilla Public License 2.0
37 stars 23 forks source link

SSL Errors #516

Open tiffrobo opened 6 years ago

tiffrobo commented 6 years ago

During testing of build 115 and 116, we are seeing an SSL error.

I am not familiar with this error for messages. @abeluck @chrisballinger why we are having issues securing a secure connection to the server. Does it have to do with T's phone being on the Staging server and R's phone being on the Zom server?

https link:

img_b27d40a18778-1 img_bf8c5dab72ce-1

Audio:

img_3815 img_3816

Devices: iPhone 7, iPhone SE OS: 11.2.2, 10.3.3 App Build: 116

abeluck commented 6 years ago

@tiffrobo Can you past the links shared in chat here?

tiffrobo commented 6 years ago

@abeluck Here is the https link https://paleoandprimalliving.com/blog/bone-broth/ I typed that link into the browser this morning and there is definitely an insecure connection. The page that loads reads "This Connection Is Not Private. The website may be impersonating to steal your personal or financial information. The SSL error message, therefore, is very justified!

However, the first picture representing the SSL error, was when I recorded an audio message within Zom and sent it to Rosa.

We were testing sending/receiving links so we sent a few during our conversation. I can add all those here if you'd like?

chrisballinger commented 6 years ago

iOS apps use something called ATS or "App Transport Security", which blocks all non-https links from loading. This is to prevent things like lazy developers of your banking app accidentally sending your credentials over clear text. The end result of this is that we can't show previews of plain http links, only https links.

For more technical information about ATS: https://developer.apple.com/library/content/documentation/General/Reference/InfoPlistKeyReference/Articles/CocoaKeys.html#//apple_ref/doc/uid/TP40009251-SW33

abeluck commented 6 years ago

The very first picture shows an "Error" for the audio message, but doesnt actually say anything abuot SSL. Are we sure the audio error is an SSL error? Or is that what the image #2 shows?

Could you please press the Copy Link option and paste that here for the audio message?

I am guessing the paleonandprimaliving link throws the error because the app cannot render a preview of a broken https site.

The same might go for the audio file, since they are represented as URLs under the hood. If you can paste the link of the audio file from that ios dialog we can see what's up.

tiffrobo commented 6 years ago

@abeluck Unfortunately, R deleted T as a friend right after this instance and lost all previous conversations with T, including this error. Is there a way on iOS to copy the audio link from the sender side? I tried tapping share, but then no further actions were available. Therefore, we can't get the audio link.

abeluck commented 6 years ago

Not sure.. I'm not familiar with iOS stuff. I guess keep an eye out for the problem again and ping me here if it happens.