# Why SSL scanner results can be misleading for app connections

DevFeed: [Why SSL scanner results can be misleading for app connections](<https://devfeed.tech/articles/certifiably-f-ine-1746.md>)

Original publisher: [Read original article](<https://signal.org/blog/certifiably-fine/>)

Author: Question authority

Published: 2020-07-01T00:00:00Z

Content type: article

Language: en

Sources: [Signal Blog](<https://devfeed.tech/sources/signal-blog.md>)

Topics: [SSL](<https://devfeed.tech/topics/ssl.md>), [certificates](<https://devfeed.tech/topics/certificates.md>), [web browser](<https://devfeed.tech/topics/web-browser.md>), [public key](<https://devfeed.tech/topics/public-key.md>), [Firefox](<https://devfeed.tech/topics/firefox.md>), [Mozilla](<https://devfeed.tech/topics/mozilla.md>)

Tags: [browsers](<https://devfeed.tech/tags/browsers.md>), [certificates](<https://devfeed.tech/tags/certificates.md>), [mozilla](<https://devfeed.tech/tags/mozilla.md>), [public-key](<https://devfeed.tech/tags/public-key.md>), [ssl](<https://devfeed.tech/tags/ssl.md>), [web-browser](<https://devfeed.tech/tags/web-browser.md>)

## AI overview

The article explains that SSL scanning utilities often focus on web-browser compatibility and performance, which can make their results misleading for connections made by applications. It also describes how browsers rely on trusted root certificates from certificate authorities to verify website connections.

## Source excerpt

Sometimes people dive into Signal's code looking for domain names, and then they send us screenshots asking if they should be concerned: We reply with a short explanation that lays out why there's nothing wrong, but we understand the confusion. Nobody would be excited about getting a grade like this on a homework assignment - and you'd have to stay after class and ask the teacher what the hell a "T" even means on your report about summer vacation ("T"oo cool for school?). Let's take a deeper look at what's going on. Read more...