Enforce optional Android JMAP SPKI pins #19

Merged

ober merged 3 commits from feat/android-spki-pinning into main 2026-09-21 21:31:57 -04:00

Conversation 0 Commits 3 Files changed 7 +103 -11

ober commented 2026-09-21 19:04:59 -04:00

Owner

Copy link

Adds optional Android JMAP SPKI pin enforcement using typed Jerboa code.

The saved HTTPS server URL may include a #sha256/<base64> pin fragment. The fragment is preserved when resolving JMAP endpoints, never sent in HTTP requests, and the first peer certificate's public-key digest is checked before response parsing. Mismatches raise an explicit TLS verification failure.

Validation:

• make -C android apk (BUILD SUCCESSFUL)
• jerboa_check_balance passed for app.ss, jmap-client.ss, and tls-pin.ss
• generated Kotlin includes HttpsURLConnection certificate verification
• version bumped to 0.5.5 / versionCode 232

Adds optional Android JMAP SPKI pin enforcement using typed Jerboa code. The saved HTTPS server URL may include a `#sha256/<base64>` pin fragment. The fragment is preserved when resolving JMAP endpoints, never sent in HTTP requests, and the first peer certificate's public-key digest is checked before response parsing. Mismatches raise an explicit TLS verification failure. Validation: - `make -C android apk` (BUILD SUCCESSFUL) - `jerboa_check_balance` passed for app.ss, jmap-client.ss, and tls-pin.ss - generated Kotlin includes HttpsURLConnection certificate verification - version bumped to 0.5.5 / versionCode 232

ober added 19 commits 2026-09-21 19:05:00 -04:00

Add typed Android mail account and offline preview app c5ec5cf169

Add typed Android JMAP mailbox client daad21c063

Add read-only JMAP inbox and message detail dfeecbf5ca

Add encrypted offline Inbox snapshot b4ff2b4d66

Add confirmed Android message actions and emulator coverage 1511a81834

Add Android Trash navigation and restore flow 827ede6397

Wire Android folder search and paging 30bd31589e

Document Android folder actions and limits 91f8f60a8e

Add confirmed Android logout and data removal 78c6e6f0c6

Implement typed Android JMAP sending 33d8e69e73

Improve Android mail accessibility 19ff5c0f98

Add Android message attachment listing 2bcefbcc5d

Add encrypted offline mail action queue c66227199e

Add safe JMAP MIME and attachment export dd9723f266

Add Android background inbox synchronization 3eec0bdabd

Add Android lifecycle emulator coverage cd47cd56bc

Fix Android E2E URL input injection e688249b6d

Post private notifications after background sync 6f14102074

Enforce optional Android JMAP SPKI pins 7b12e71e36

ober added 1 commit 2026-09-21 19:09:47 -04:00

Make Android emulator smoke robust 0cf81eefc6

ober added 1 commit 2026-09-21 19:13:25 -04:00

Harden API 26 attachment picker cancellation 428a24d74e

ober force-pushed feat/android-spki-pinning from 428a24d74e to 78fd59ee2e 2026-09-21 21:24:19 -04:00 Compare

ober merged commit 7341879df0 into main 2026-09-21 21:31:57 -04:00

ober referenced this pull request from a commit 2026-09-21 21:31:58 -04:00

Merge pull request #19

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

ober/jerboa-mail!19

No description provided.