It doesn’t take a crystal ball to predict that 2013 will press the limits of the mobile infrastructure. The sales of smart phones and tablets are through the roof, and apps are being written at a fast pace. This is a boon for many, bringing the internet and cloud applications to the hands of users all over the world, who may not own a computer or have ISP service, but do own a phone.
In the race to be part of the mobile rush however, fast app development is often more valued than a well thought out and secure application. As a result, SSL/TLS app failures can result in broken, disabled or nonexistent validation behind the scenes of mobile applications. SSL is the backbone technology for secure connections between the app and the cloud, but without proper certificate handling by the developers it’s still vulnerable to attacks by outsiders. This core vulnerability presents a real danger, and it’s imperative that the app developer learn how...