Have you ever picked up your phone to look at something online and found that most websites can't connect, but instead display privacy warnings? This is due to root certificate expirations, like the one that happened in 2021 and nearly caused chaos for phones running Android 7 or earlier. An unconventional technique that Android has for managing expired certificates could help solve the problem, but Google is looking at a longer-term solution. Android 14 could be the starting point for introducing this solution.
See also: Health Connect: Can be integrated into Android 14
Mishaal Rahman, a senior technical writer at Esper.io, recently discovered open source Android code that reveals Google’s development of a new core module for dynamic root certificate updates. Currently, root certificates are only updated when full system updates are performed. However, due to their infrequent frequency, this means that older devices tend to get bricked and therefore, increase their vulnerability to threats.
Instead of being bundled with the system, users can get the latest version of the certification module through Google Play. Thanks to this, Google can now push regular updates that keep your device connected to the full range of websites accessible on the internet.
See also: Android 14 Beta: Likely to launch in April 2023
In addition, this new approach offers another impressive advantage. Trust is the foundation of root certificates, and installing them allows us to establish secure connections to websites. Recently, a disturbing discovery was made that one of the root certificate authorities, TrustCor, was associated with a company that offers intelligence services and malware .
Although no evidence of wrongdoing by TrustCor was found, companies quickly began to abandon the business due to concerns that something illegal might be going on. Ultimately, it would be disastrous if intelligence agencies were able to access all the encrypted data shared between a server and an individual user. While Google will no longer support the TrustCor certificate in full system security updates, it would be ideal if it could speed up the process and deactivate the certificate earlier than planned.
See also: Google Chrome for Android: Gets track price feature
Outdated root certificates are a huge issue on Android devices, creating a host of complex problems. It's impressive that Chrome only recently created its own root store - an area where digital certificates are kept secure.
Android 14 promises to be one of the best releases for Android users everywhere! With improved privacy features , a personalized design language, and an intuitive notification system, it looks like this new version will make using an Android device even better than before!
