Android Chrome 99 expands Certificate Transparency, breaking all MitM dev tools

Certificate transparency is superb improvement to HTTPS certificate security on the web that's great for users and businesses, but on Android it creates a huge problem for the many developer tools like HTTP Toolkit which install trusted system certificates into Android to intercept & debug app traffic. This doesn't appear in the main announcements anywhere, but buried deep in the enterprise releas

[tmatsuu]

Android上のChrome99はユーザストアに自己署名証明書を入れてもCTログを求めるようになり実質MITMができなくなった。ルート権限を持ったうえでシステムストアに入れないといけないってことかな。後半のadbを使った云々は不明