Disabled Certificate Transparency

FAQ.md

@@ -6284,6 +6284,7 @@ visible as a short delay between tapping on a link and the link confirmation dia
 
 🌎 [Google Translate](https://translate.google.com/translate?sl=en&u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq201)
 
+**Unfortunately, the Certificate Transparency library isn't maintained anymore, and therefore Certificate Transparency has been disabled in version 1.2320.**
 
 Please see [this article](https://certificate.transparency.dev/howctworks/) about what certificate transparency is.
 Alternatively, see [this Wikipedia article](https://en.wikipedia.org/wiki/Certificate_Transparency).

app/src/main/java/eu/faircode/email/DebugHelper.java

@@ -1211,7 +1211,7 @@ public class DebugHelper {
                 boolean ssl_harden = prefs.getBoolean("ssl_harden", false);
                 boolean ssl_harden_strict = (ssl_harden && prefs.getBoolean("ssl_harden_strict", false));
                 boolean cert_strict = prefs.getBoolean("cert_strict", true);
-                boolean cert_transparency = prefs.getBoolean("cert_transparency", false);
+                boolean cert_transparency = (prefs.getBoolean("cert_transparency", false) && false);
                 boolean open_safe = prefs.getBoolean("open_safe", false);
 
                 size += write(os, "timeout=" + timeout + "s" + (timeout == EmailService.DEFAULT_CONNECT_TIMEOUT ? "" : " !!!") + "\r\n");

app/src/main/java/eu/faircode/email/EmailService.java

@@ -216,7 +216,7 @@ public class EmailService implements AutoCloseable {
         this.ssl_harden = prefs.getBoolean("ssl_harden", false);
         this.ssl_harden_strict = prefs.getBoolean("ssl_harden_strict", false);
         this.cert_strict = prefs.getBoolean("cert_strict", true);
-        this.cert_transparency = prefs.getBoolean("cert_transparency", false);
+        this.cert_transparency = (prefs.getBoolean("cert_transparency", false) && false);
         this.check_names = prefs.getBoolean("check_names", !BuildConfig.PLAY_STORE_RELEASE);
 
         boolean imap_compress = prefs.getBoolean("imap_compress", true);

app/src/main/java/eu/faircode/email/FragmentOptionsConnection.java

@@ -455,6 +455,7 @@ public class FragmentOptionsConnection extends FragmentBase implements SharedPre
             }
         });
 
+        swCertTransparency.setEnabled(false);
         swCertTransparency.setOnCheckedChangeListener(new CompoundButton.OnCheckedChangeListener() {
             @Override
             public void onCheckedChanged(CompoundButton compoundButton, boolean checked) {
@@ -602,7 +603,7 @@ public class FragmentOptionsConnection extends FragmentBase implements SharedPre
                         boolean ssl_harden = prefs.getBoolean("ssl_harden", false);
                         boolean ssl_harden_strict = prefs.getBoolean("ssl_harden_strict", false);
                         boolean cert_strict = prefs.getBoolean("cert_strict", true);
-                        boolean cert_transparency = prefs.getBoolean("cert_transparency", false);
+                        boolean cert_transparency = (prefs.getBoolean("cert_transparency", false) && false);
                         boolean check_names = prefs.getBoolean("check_names", !BuildConfig.PLAY_STORE_RELEASE);
                         boolean bc = prefs.getBoolean("bouncy_castle", false);
                         boolean fips = prefs.getBoolean("bc_fips", false);
@@ -838,7 +839,7 @@ public class FragmentOptionsConnection extends FragmentBase implements SharedPre
             swSslHardenStrict.setChecked(prefs.getBoolean("ssl_harden_strict", false));
             swSslHardenStrict.setEnabled(swSslHarden.isChecked());
             swCertStrict.setChecked(prefs.getBoolean("cert_strict", true));
-            swCertTransparency.setChecked(prefs.getBoolean("cert_transparency", false));
+            swCertTransparency.setChecked(prefs.getBoolean("cert_transparency", false) && false);
             swCheckNames.setChecked(prefs.getBoolean("check_names", !BuildConfig.PLAY_STORE_RELEASE));
             swOpenSafe.setChecked(prefs.getBoolean("open_safe", false));
             swHttpRedirect.setChecked(prefs.getBoolean("http_redirect", true));

index.html

@@ -3139,6 +3139,7 @@ adb install /path/to/FairEmail-xxx.apk</code></pre>
 <p><br></p>
 <p><a name="faq201"></a> <strong>(201) What is certificate transparency?</strong></p>
 <p>🌎 <a href="https://translate.google.com/translate?sl=en&amp;u=https%3A%2F%2Fm66b.github.io%2FFairEmail%2F%23faq201">Google Translate</a></p>
+<p><strong>Unfortunately, the Certificate Transparency library isn’t maintained anymore, and therefore Certificate Transparency has been disabled in version 1.2320.</strong></p>
 <p>Please see <a href="https://certificate.transparency.dev/howctworks/">this article</a> about what certificate transparency is. Alternatively, see <a href="https://en.wikipedia.org/wiki/Certificate_Transparency">this Wikipedia article</a>.</p>
 <p>When certificate transparency is enabled in the connection-settings tab page of the app, the <a href="https://github.com/GoogleChrome/CertificateTransparency/blob/master/ct_policy.md">Chrome Certificate Transparency Policy</a> will be applied. The CT log will be downloaded from <a href="https://www.gstatic.com/ct/log_list/v3/all_logs_list.json">https://www.gstatic.com/</a>.</p>
 <p>FairEmail uses <a href="https://github.com/appmattus/certificatetransparency">this library</a> to implement certificate transparency via a custom trust manager.</p>