C or C++ : Unsafe SSL settings

The application establishes the SSL connection with insecure settings.

To establish a secure connection the application must verify that the certificate corresponds to the requested host, the certificate term has not expired, and that the chain of trust goes back to one of the set in the system trusted root certificates. Disabling any of these checks may lead to compromise of transferred data.

Insecure Communication takes the third place in the “OWASP Mobile Top 10 2016” mobile platforms vulnerabilities ranking.