Post #2603608
2026-04-12 01:18 UTC
@markisherwood@kind.social @pl@mastodon.social Yeah, interesting. Something like that makes sense to me, or possibly they're doing a deeper "de-Mozilla-ing" pass and falling back entirely to Android's system-level cert verification.
(Total speculation on my part, have not let myself get interested enough to go dig around in source code!)
Replies (1)
-
@markisherwood@kind.social 2026-04-12 01:20
@projectgus@aus.social @pl@mastodon.social I did find the following in Vanadiums feature list. So not sure why it shows it as valid. "Nearly all remote services disabled by default or removed. Only connects to GrapheneOS servers by default. There are only 2 default services: component updates such as certificate authority and certificate revocation updates and DNS-over-HTTPS connectivity checks when enabled"