Secure connections (HTTPS) filtering about adguardforandroid HOT 11 CLOSED

When you say "Simple MITM", I hope you mean basic request filtering only.… ☺

from adguardforandroid.

@Revertron look here:
http://stackoverflow.com/questions/18065170/how-do-i-do-tls-with-bouncycastle

I think TlsServerProtocol class is what we were looking for.

from adguardforandroid.

Commited first implementation.

from adguardforandroid.

Just a thought, if we have this active, is it possible to white-/blacklist sites from only this feature someplace in AG?

from adguardforandroid.

Just a thought, if we have this active, is it possible to white-/blacklist sites from only this feature someplace in AG?

There are two options.

1. Blacklist filtering. Means filter only domains from the whitelist.
2. Whitelist filtering. Means filter everything except the whitelist.

Default is the second one.

from adguardforandroid.

An update on current state: we are working on server certificates verification.

from adguardforandroid.

Closing this issue as SSL filtering goes to inner testing stage.

All open bugs regarding SSL filtering are here:
SSL

from adguardforandroid.

@ameshkov Will it be a configurable option in the settings? I would like the ability to disable this feature if I want to. I am also okay with it being enabled by default btw if you decide to.

from adguardforandroid.

@eligrey it will be disabled by default.

from adguardforandroid.

Also it will be configurable.

There are two filtering modes: "blacklist" and "whitelist".

In "blacklist" mode AG will only filter domains from the "blacklist".
In "whitelist" mode AG will filter all domains except listed in a special SSL whitelist.
Both lists are configurable.

Also "whitelist" by default contains lots of known financial services and online banking websites.

from adguardforandroid.

@ameshkov Thank you, sounds great!

from adguardforandroid.