Comment on Indian Government developed UPI app not allowing me to use the app w/o turning off Adguard.

jaybone@lemmy.zip ⁨5⁩ ⁨weeks⁩ ago

• Passerby6497@lemmy.world ⁨5⁩ ⁨weeks⁩ ago

  It means they know the hash or whatever for their cert, and intentionally fail if there’s any kind of MITM funkiness (which you’d have for an ad blocker doing https intercept)

  source

  • observantTrapezium@lemmy.ca ⁨5⁩ ⁨weeks⁩ ago

    It could also be that the app is looking at parameters other than the hash (which would probably be that of the certificate authority rather than the domain’s certificate), like the CN, which is potentially fakeble. You can also try to mess with the APK file, maybe find the strings associated with the certificate check and replace them. I won’t fault the app’s authors for making such a check though, MITM is so easy to do without certificate validation.

    source

    • limerod@reddthat.com ⁨5⁩ ⁨weeks⁩ ago

      HTTPS filtering in adguard requires the installation of a user certificate by adguard to filter HTTPS traffic. Apps like firefox complain and won’t work unless you allow user CA

      source