Content-Type: text/plain;
	charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3776.700.51.11.2\))
Subject: Re: Client/server certificates verification support on Android
 platform
From: Daniel Gustafsson <daniel@yesql.se>
In-Reply-To: <CAKOSLFXOxaNG2B9WyZ2B-_KmrL2mHmCpd3agSP6kRAaL0=7YOA@mail.gmail.com>
Date: Fri, 19 Sep 2025 12:44:41 +0200
Cc: pgsql-general@lists.postgresql.org
Content-Transfer-Encoding: quoted-printable
Message-Id: <CD466ADF-0C2B-4458-A511-37C11F67AF7D@yesql.se>
References: <CAKOSLFXOxaNG2B9WyZ2B-_KmrL2mHmCpd3agSP6kRAaL0=7YOA@mail.gmail.com>
To: Mathieu Pellerin <mathieu@opengis.ch>
Archived-At: <https://www.postgresql.org/message-id/CD466ADF-0C2B-4458-A511-37C11F67AF7D%40yesql.se>
Precedence: bulk

> On 19 Sep 2025, at 12:18, Mathieu Pellerin <mathieu@opengis.ch> wrote:

> Would it make sense for other operating systems beyond Windows to also =
have relaxed permissions within specific application-specific folders? =
On Android, the application=E2=80=99s data directory would certainly =
match a similar set of secure assumptions as the OS restricts its =
access.

FWIW, I am not a fan of the presumed-safe approach to filesystem =
locations, and
even less so of relaxed permissions via configuration.

One thing which has been discussed is to add support for vaults, like =
macOS
keychain etc, as an alternative to filesystem acceess.  Are there any =
such
capabilities on Android which could be relied upon?

--
Daniel Gustafsson