iphone Radio downloads

[Iain Wallace]

On Mon, Dec 13, 2010 at 2:58 PM, Charles Johnson <cehjohnson at gmail.com> wrote:
> David Woodhouse wrote:
>>
>> On Mon, 2010-12-13 at 14:25 +0000, Roger Burton West wrote:
>>
>>>
>>> When I look at http://www.bbc.co.uk/mobile/iplayer/episode/b00vn7gx
>>> (with a suitable iPhone-ish user-agent set, otherwise I just get the
>>> unsupported message) there's no download.iplayer.bbc.co.uk URL in the
>>> response.
>>>
>>
>> Aren't they using https:// for iPhone now?
>>
>>
>
> According to  http://po-ru.com/diary/bbc-fights-against-openness-again/
> they are. That's actually where i heard about you folk ;)
>>
>> And some kind of client certificate? Would be interesting to see if we
>> can get certificates...
>>
>>
>
> Running an iphone through a debugging proxy could be interesting
>
> g00se

They're using the Apple root cert for iOS versions 3 and above. The
only negotiation the BBC does it to see if the cert is signed by
Apple. You can't sniff this off the traffic, you'd have to get the
certificate off an actual device. We're into the realms of device
hacking if you want iOS downloads working again.