David Allen's Page

Using anything but the built in SSL authentication and validation modes and certificates issued by the CA’s that are preloaded into an Android phone by the manufacturer, is non-trivial. Android 4.2.2 has made it easier to dynamically add certificates, but as the vast majority of current devices aren’t even 4.x, this remains an issue.  In particular, using self signed certificates requires the use of custom trust stores and custom key stores. If you want to turn on or off server host validation,…See More