hammer-editor/android
Adam Brown 5b17fbf429
Make clients HTTPS-only; add dev self-signed cert support (#743)
Remove the HTTP/HTTPS protocol picker and all ssl plumbing from the
client. Persisted server settings now always resolve to HTTPS, so a
legacy ssl=false server.json is upgraded on load. ServerSettings.ssl is
kept only as an internal seam for the plain-HTTP integration-test server.

Android: drop the permissive network_security_config so cleartext
traffic uses the secure platform default (blocked).

Server keeps its plain HTTP connector for reverse-proxy deployments. In
--dev with no sslCert configured, it now generates and persists a
self-signed keystore (hammer_data/dev-selfsigned.jks) and serves TLS on
a non-privileged port (8443 by default). The desktop --dev client trusts
that cert for loopback hosts only; remote hosts still get full cert and
hostname validation.
2026-07-17 00:52:41 -07:00
..
playstore Prep for Google Play release 2023-04-24 17:55:05 -07:00
src Make clients HTTPS-only; add dev self-signed cert support (#743) 2026-07-17 00:52:41 -07:00
build.gradle.kts Strip dep info blob from fdroid builds 2026-06-22 02:08:29 -07:00
proguard-rules.pro Save exception info from proguard 2025-12-25 11:32:53 -08:00