Call to SSLCertificateSocketFactory.getInsecure()
Call to SSLCertificateSocketFactory.getInsecure()
The SSLCertificateSocketFactory.getInsecure()
method returns an SSLSocketFactory with all TLS/SSL security checks disabled, which could result in insecure network traffic caused by trusting arbitrary TLS/SSL certificates presented by peers. This method should be avoided unless needed for a special circumstance such as debugging. Instead, SSLCertificateSocketFactory.getDefault()
should be used.
Issue id: SSLCertificateSocketFactoryGetInsecure
https://goo.gle/SSLCertificateSocketFactoryGetInsecure
Inspection Details | |
---|---|
Available in: | IntelliJ IDEA 2023.3, Qodana for Android 2023.3, Qodana for JVM 2023.3 |
Plugin: | Android, 2022.3.1 Beta 2 |
Last modified: 13 July 2023