flawedworld

Results 81 comments of flawedworld

It depends on the carrier

Carriers or the user can decide when it automatically kicks in. We aren't going to remove the option for the user to enable/disable it.

VoLTE traffic is carrier traffic and not user defined traffic, it won't go via a VPN. >Because via Mobile Carrier the phone can be triangulated. With VoLTE only the IP...

https://gist.github.com/flawedworld/1bc3f80aa9a85ec11f6a78d6fa9d7119

They are maintained here: https://github.com/chromium/chromium/commits/main/net/http/transport_security_state_static.pins And yeah you are right, sites have to look after it themselves. It's used only on "Google Chrome" branded builds.

https://github.com/chromium/chromium/blob/cf396c239436e0250cece84a6ec008fcce6a6cff/net/http/transport_security_state.cc#L417

> An alternative sounds nice, but it would need to be easily maintainable and something that wouldn't be deprecated 2 years later or easily break. Also something that could be...

This isn't really a bug but rather just how the AOSP Dialer works. Nonetheless it would be a nice improvement if it didn't do this.