TPS
@robw-nl Essentially https://github.com/AdguardTeam/AdguardForAndroid/issues/5766?
@Nzzyme Hold tag generally means least priority ("We get to it when we get to it, usually when working on something else related that'll fix this as a side-effect") so...
@Versty Now that this is Fixed, what version may we test this on?
This been available for some time in AGVPNa nightly.
If you all subvert the pinning, will AG verify the website cert from that pinning on its own? There's [an actual reason for cert pinning](https://en.m.wikipedia.org/wiki/HTTP_Public_Key_Pinning)!
The sites & apps that use pinning don't trust validation _only_, so implementing pinning verification in AG might be smart before doing the #21 MITM. I agree it's on the...
> What I am talking about is SSL pinning used inside some popular apps like Twitter and Facebook. They throw an error when root certificate is local. All I'm saying...
But this issue is solely for rooted devices, right? So the potential remains. Being careful is important! & cert pinning means just cert _verification_ isn't purely trusted, no?
My understanding is that, e.g., Walmart still uses this system.
I just ran into it on GoodRx, also.