If you're using custom system CAs on Android for TLS - whether that's for HTTPS debugging, ad blocking or local testing - there's trouble brewing.
Let's talk about the latest Android 17 changes and how to keep things working:
- Wow - @daoud_youssef has just put out 5 (five!) separate intro videos for all sorts of different HTTP Toolkit use cases on YouTube. If you want some help getting started, take a look: youtube.com/@daoudyoussef7… youtube.com/watch?v=vgQAkh…
- 200ms in the life of an HTTP request: 200ms.thenodebook.com
- Nearly 5 years of hard work later, the TLS fingerprinting Node.js issue is finally fixed: github.com/nodejs/node/is…. It's now possible to match most common TLS fingerprints directly in Node.js! There's a new library to do all the hard work here: github.com/httptoolkit/no…
- Have you seen testserver.host? As part of building HTTP Toolkit I often need a remote servers for testing edge cases, so I've built one! Now fairly mature & stable. It's httpbin.org plus badssl.com plus lots of extras. testserver.host


