> Many old Pebble apps/faces use weather APIs that no longer work (Yahoo, OpenWeather). The Pebble mobile app now catches these network requests and returns data from Open-Meteo - keeping old watchfaces working!
And we are very determined to keep the Open-Meteo weather API open-access indefinitely and don’t share the same fate as many closed-source APIs like Yahoo or OpenWeatherMap.
How does that work? I assume these APIs use SSL, which should prevent such MitM attacks.
Are those Apps using the system SSL library which bypasses certificate validation for those domains? Or does the OS add a Root CA to the certificate store which signs fake certificates for those domains?
open-meteo|10 days ago
ageitgey|10 days ago
0127|10 days ago
unknown|9 days ago
[deleted]
Raed667|10 days ago
titaniumtown|9 days ago
ThePowerOfFuet|10 days ago
CodesInChaos|9 days ago
Are those Apps using the system SSL library which bypasses certificate validation for those domains? Or does the OS add a Root CA to the certificate store which signs fake certificates for those domains?
lopis|9 days ago