[Android Software/Hacking General [Developers Only]] MrT69:
It's a strange things that this kind of postings fortuitously here and on Android Help Forum are nearly the same.

I want to say sorry because I have this kind of bashing since beginning of November and whatever I explain or try to explain it's always the same. keweon is scam, dangerous and I'm collecting data.

Sure, with a DNS Server I can redirect users to a website and get them infected. But why should I do this?

Also the security. I'm working since 20 yrs within security area and keweon is not a solution and keweon is just only a side product of my own firewall developement. But what do you guess will happens when I go to a CIO and tell this guy: Hey, get rid of your current firewall, I have a better solution.

Really? That's ridiculous. Also with the Certificate. On this Telegram group a few people was telling me that I'm doing data collection and even UFI (User Fingerprint Identification) and they have had also security concerns but they have had no clue about certificates.

But if you have security concerns let me give the question back to you. Antivirus solutions will investigate SSL Traffic. For this they need to terminate them and re-encrypt them. What would you do? Not to use it and would you let pass the Ransomware?

Every security solution has pro and cons. You want to proof it? The only proof is when you log on to the Systems and try it by yourself. Same with Microsoft. How do you make sure that they offer a working update? They even proof it written but they even have somtimes problems and an entire company would be down. Bad luck.

And exactly this bad luck I have had prevented. Whenever a security issue happens I was working too long within IT Security. That's also the reason why this system will never grow up on a cheap base. If I will build it up this will become damn expensive. Why? For security reasons?

How you proof that your Provider will not inject your website? How do you proof that you website will not host any virus or malware or even ransomware?

It's not possible to proof this. Even when I grant you login to my servers - who make sure that you will not download a poison thing which inject all my system?

You want to have a 100% warranty that everything is 100% safe and secure? In simple words, it's not possible.

Users and Systems are only working when they trust the System. I'm damn proud about 41 Million (!) certifciates downloads. You can be sure that you are not alone with this.

My goal will not interest you because of your former answer. But if you want to have a 100% warranty I only can give the Option give it a try and see. You can log, you can check and if you have questions I try to answer this.

Technical facts:

The Server are tripple safe with hard disc encryption. Also specific services runs within a Crypto Container. If the provider of the VPS try to steal the Server everything is encrypted.

The Certifcate is trippel protected and in addition every 2 weeks a script is running. If I die off then the Certificate will automatically terminated by a CRL which will be uploaded when I don't update a timestamp manually. When I stop the script or forgett to make the time actuall within all certificates becomes invalid after 2 weeks as long as I'm doing this alone.

Different szenarios with the Certificate are not possible. If someone even is able to break the tunnel then it is not a real security issue because he will get "0" Data. This can be confirmed by Wireshark and differnt other sniffer.

The Certificate has no Application within the Background. It's not the Certificate which steal the data. It's always (!) an App or Application who will steal the data. I never saw a Certificate data collecting or transmitting data. There is no code inside and it's also not build for this.

Proof it is not possible. Would be the same when I say "Proof it that you are not a killer". Even when we meet face to face it can be that you going go kill me.

I only can tell what I have done. The decision if this is proof is up to you. Use it, see it and decide it. Proofing this or a 100% warranty you will get nowhere. Except when you die off. Then it's proof that you are 100% not longer alive.

Will you meet a girl and ask her "MOD EDIT: DELETED - WATCH YOUR LANGUAGE"? No. Will you ask you Boss "Hey, proof it that you will not fire me when I sign the contract?" No. You expect something which is not possible.

You expect something which requires a high value property. Only one thing can proof this. And this is trust.