Daniel Micay
Daniel Micay
Yes, that's a security threat.
ADB provides a massive amount of access even on a production (`user`) build, and on a `userdebug` build it even provides root access. ADB without the network feature relies on...
Issue has been locked due to misuse of the issue tracker. It may delay the feature being implemented due to contributors being unable to discuss it here.
Let's Encrypt has supported CAA account and method binding since December 2022. I forgot to mention that here at the time. We use this for all the GrapheneOS domains. https://community.letsencrypt.org/t/enabling-acme-caa-account-and-method-binding/189588
Is this still an issue for you? It's probably an app bug.
Very likely that it's an app bug and I don't think we want to track it here.
I think we should leave this one open and verify ourselves.
I do think we want what Google did by default.
The ability to do it is there, we just aren't doing much with it yet and it's unrealistic without a dedicated person hired to handle testing including apps.
This was resolved.