What’s NNNNNNNNew in Android Security?
summary
Gets concrete: how to enable Network Security Config XML (including debug-only self-signed certs, user cert handling, and SSL pinning), how to ask the keystore for Key attestation and validate the certificate chain on a server, what APK Signing v2 fixes (zip-malleability and faster signing) and build-order caveats, and how Direct Boot and device protected storage work (createDeviceProtectedStorageContext and safe use cases). Includes backport library notes and when to expect immediate payoff.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:56Direct Boot in Android 7
- 8:55Android Keystore updates and key attestation
- 16:08Network Security Config in Android 7
- 26:20Miscellaneous security improvements in Android 7
- 35:06Safety Net API overview
- 40:45Android O security highlights
- 42:09Q&A
related talks
34mDemystifying Android Security
26mFrom HTTPS Basics to Network Security Configuration
37mPractical security for Android apps
39mO-mg what's new in Android Security?
40mBEST PRACTICES FOR ANDROID ENTERPRISE APPLICATION DEVELOPMENT
28mModern security for Android Developers
45mSign here, please!
39mSign here please!