<story><title>Tracking my phone&apos;s silent connections</title><url>https://kushaldas.in/posts/tracking-my-phone-s-silent-connections.html</url></story><parent_chain><item><author>xg15</author><text>I&amp;#x27;m not sure how the situation is with Apple, but it always bothered me that on Android, apps can implement their own logic for TLS certificate validation. Apps can use this to hardcode key-pinning and make it effectively impossible (short of patching the app) to inspect an encrypted connection, even if you&amp;#x27;re the owner of the device.&lt;p&gt;I feel the push for DoH will make this even worse - because then you won&amp;#x27;t even know which servers your apps are connecting to.</text></item></parent_chain><comment><author>kgwxd</author><text>Once you install closed source software, you&amp;#x27;re no longer the sole owner of your computer. If an app wants to hide data, and they can&amp;#x27;t rely on tls to do it, they&amp;#x27;ll just add another layer of encryption.</text></comment>
<story><title>Tracking my phone&apos;s silent connections</title><url>https://kushaldas.in/posts/tracking-my-phone-s-silent-connections.html</url></story><parent_chain><item><author>xg15</author><text>I&amp;#x27;m not sure how the situation is with Apple, but it always bothered me that on Android, apps can implement their own logic for TLS certificate validation. Apps can use this to hardcode key-pinning and make it effectively impossible (short of patching the app) to inspect an encrypted connection, even if you&amp;#x27;re the owner of the device.&lt;p&gt;I feel the push for DoH will make this even worse - because then you won&amp;#x27;t even know which servers your apps are connecting to.</text></item></parent_chain><comment><author>Shaaaaaaare</author><text>Unfortunately Google both supports and recommends this. Recently they&amp;#x27;ve even made it easy for apps to automatically ignore any custom certificates added to the trust store, so they don&amp;#x27;t even have to bother to implement pinning.</text></comment>