Paper presented at ACM CCS 2025
Our paper “Deep Dive into In-app Browsers: Uncovering Hidden Pitfalls in Certificate Validation” was presented at the ACM Conference on Computer and Communications Security (ACM CCS 2025) in Taipei, Taiwan.
Authors: Woonghee Lee, Junbeom Hur, and Hyunsoo Kwon.
The paper measures how the embedded webviews inside messaging and social apps validate TLS certificates, and shows that validation there is weaker than in the standalone browser on the same device.