Apps downloaded two million times are vulnerable to trivial man-in-the-middle attacks.
Category: secure sockets layer
Netflix move leaves Amazon as the most visible no-show to the Web crypto party.
Bug allowed attackers to use fake certificates to bypass HTTPS protections.
Draconian move follows the issuance of certificates masquerading as Google domains.