Search Unity

[Feature Request] Allow global configuration of Certificate Handling

Discussion in 'Editor & General Support' started by primitiveType, Oct 16, 2019.

  1. primitiveType

    primitiveType

    Joined:
    Oct 25, 2012
    Posts:
    22
    I would like a way to specify the behavior of SSL connections on a per-project basis. Currently, one handles certificate validation with UnityWebRequest.CertificateHandler. The default certificate handling is not particularly secure (though its obviously fine for many use cases), and for security-critical applications providing a certificateHandler to each UnityWebRequest is cumbersome. For one, you have to remember to do it for every request object you create. And second, any libraries you include will not be using your certificate handler by default, potentially exposing you to connections that your application would not approve of.

    It would be helpful if it were possible to specify in one place that every connection this application makes needs to pass through my special certificate handler.