Insecure TLS/SSL trust manager
Insecure TLS/SSL trust manager
This check looks for X509TrustManager implementations whose checkServerTrusted
or checkClientTrusted
methods do nothing (thus trusting any certificate chain) which could result in insecure network traffic caused by trusting arbitrary TLS/SSL certificates presented by peers.
Issue id: TrustAllX509TrustManager
https://goo.gle/TrustAllX509TrustManager
Inspection Details | |
---|---|
Available in: | IntelliJ IDEA 2023.3, Qodana for Android 2023.3, Qodana for JVM 2023.3 |
Plugin: | Android, 2022.3.1 Beta 2 |
Last modified: 13 July 2023