[Android Software/Hacking General [Developers Only]] MrT69:
keweon and Security (concerns)

1. HTTPS and Security

It's indeed interesting HOW people think about worst case scenaroios and this is in a few words just ridiculous because of just a Certificate. A Certificate has nothing to do with security. A HTTPS connection is just nothing more then a validation how the Date transmission flow because its an END2END protected communication. HTTPS has NOTHING (!) to do with Security. The letter "S" is for SECURE - NOT FOR SECURITY.

The encryption is used only during the connection construction to prevent MITM Attack. Data inside the HTTPS connection running unencrypted.

Proof of this:

https://tools.ietf.org/html/draft-hickman-netscape-ssl-00

https://www.ibm.com/developerworks/library/ws-ssl-security/index.html

2. User Feedback

I have seen a lot of things within my life but I guess this will explain a lot of things. Here are 2 of so many feedback messages from users via Telegram:

Now you can think about this bashing.

3. Concerns about keweon

I already expected this because this kind of bashing was to much. I have a Idea and it's working. I spend a lot of my own money into this project. From the point of security I have implemented a lot of security and within the entire solution there are 12 patent claims invented by my own.

Security and Privacy must become a fundamental right. If you take a look at so many Webpages then you will see they are still collecting data about you and your device. GDPR or DSGVO? Written words do not replace action. I can only offer an option and show, hey it is possible.

4. My personal and final statement

a) keweon is a security solution and the reason for this is to show security is possible without any proxy soluiton.

b) keweon is build to prevent Data spying and privacy violations. I don't collect any Data even on OS level and even if it's seem that I can spy out users it's not possible. If you have still concerns about this and you don't want to believe this - DON'T USE KEWEON.

c) The entire solution is build up to prevent a lot of threats. I know this will make not only friends. If someone trying to drive a campain against me or keweon - DO IT!

d) Privacy MUST become a fundamental right for everyone on this Planet. That's what I'm fighting for since years. Writing funny statements on a website but still collecting data is not my understanding of Privacy (Google, Facebook, Microsoft, etc)

e) I'm working more then 16 yrs on the entire solution. Since 2014 the complete code is re-written for public usage because many people was asking to use it.

f) If you have a better idea then feel so free and do what you want to do.

g) Within the future I will ignore ANY (!) discussions about security concerns. I know that a lot of people don't know how it's working but they want to know it.

h) Blaming on me and trying to steal my ideas would not help. You also would need the knowledge. Why do you think Apple, Microsoft and Nokia told me that this is not possible what I'm doing there?

i) I can't have an "emotional distance" to my baby because I spend a lot of money, time and developement into it. If I have had a "not political correctness" speach when someone blames on me or keweon then I only can say: "Excuse this please"

i) If you have any security concerns - DON'T USE IT!

5. Thanks a lot

I doubted myself but because of the feeback of so many users it was quite clear what is going on there. Thanks a lot to all of you for this great support.