mapbox / mapbox/mapbox-maps-android
SSL Certificate Pinning Support in Mapbox Android SDK v11
Open
Nobody has claimed this yet.
auto-triaged
feature :green_apple:
- Dominant language
- Kotlin
- Stars
- 578
- Forks
- 161
- PR merge metrics
- No merged PRs in 30d
Description
## New Feature
Mapbox Android SDK v11 no longer supports SSL certificate pinning, which was achievable in v10.
In version 10 we used to achieve this by overriding the http stack but this is not available anymore.
## Why
This is a critical security feature for apps handling sensitive data.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by comparing how SSL certificate pinning was achieved through the HTTP stack in SDK v10 with the available networking hooks in SDK v11. Define the supported pinning approach for sensitive-data applications and identify the validation needed to show that certificates are correctly pinned.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, kotlin
- Domain
- mobile-dev, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100