Amir Livneh
Amir Livneh
We have an implementation of an Interceptor implementing HSTS pre-loaded list (no Strict-Transport-Security header support). I can submit a PR if you decide this should be part of the OkHttp...
@yschimke, I'll wait for the maintainers' decision on this. If we don't end up upstreaming it, I may be able to publish the Interceptor somewhere.
I don't expect the implementation to add bloat because the list of preloads is provided by the user. The API will be something along these lines: ``` List hstsPreloads =...
I agree that disabling cleartext is the simplest solution and probably good enough for most clients. Our apps have special use cases that require more granular control. Fortunately, Interceptors are...
@sarbyn, can you set this on `OkHttpClient.Builder()` and provide the output from a problematic run? ``` .eventListenerFactory(new LoggingEventListener.Factory()).build(); ``` Also, does this reproduce with http://www.nghttp2.org/httpbin/post?
``` 2018-12-27 10:12:05.249 15856-16569/com.sarbyn.androidsessionupload D/OkHttp: [89 ms] requestBodyStart 2018-12-27 10:12:17.714 15856-16590/com.sarbyn.androidsessionupload W/zygote: Long monitor contention with owner AsyncTask #8 (16569) at void com.android.org.conscrypt.NativeCrypto.SSL_write(long, java.io.FileDescriptor, com.android.org.conscrypt.NativeCrypto$SSLHandshakeCallbacks, byte[], int, int, int)(NativeCrypto.java:-2) waiters=0...