[Security] SSL/TLS Man in the middle

[Rafiot]

Hi,

The app doesn't check the validity of the certificates it receives from the server:

AndroidCaldavSyncAdapater/CalDAVSyncAdapter/src/org/gege/caldavsyncadapter/caldav/EasySSLSocketFactory.java

Line 76 in 27e8a0f

String authType) throws CertificateException {

This is a critical but making it very easy for anyone to snoop into a, in theory, secure connection.

[alincalinciuc]

Wil there be any update to fix this security issue?

[untitaker]

This is a very serious issue. It basically makes this app not fit for daily use.