14

I’d like to know the transmission of SE Android app is encrypted or not with https. Please make me confirm.

  • 1
    If I could use wireshark I will be able to capture the packet whether it's encrypted or not. So, I used Android DDMS instead. It seems be all packets is HTTP1.1 except for the authentication which is handled by Google accounts. – user3171796 Feb 20 '14 at 0:56
  • Yeah, I really doubted that the Android app was encrypted, especially since it is still in Alpha. Better to get the app working properly first, before putting in the fancy goodies. – Robert Harvey Feb 20 '14 at 0:59
  • 3
    @RobertHarvey The Android app actually was released already; it's the iOS app that's in alpha right now. – hichris123 Feb 20 '14 at 2:32
15

The app is using the Stack Exchange API, which requires HTTPS to be used whenever a user access token is transmitted.

I did an inspection of traffic to/from my phone, and confirmed the app does connect to a Stack Exchange IP address (198.252.206.140) over HTTPS whenever a network based action is taken.

But, I don't have access to the app source code so I can't be 100% sure. As far as I can tell, all network traffic related to the app is handled via secure tunnels. Including the push notifications which go through Google's servers.

  • 5
    Yep, the app only uses https://, since, well, it has to. – Kasra Rahjerdi Feb 20 '14 at 19:20

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .