Return to Answer

###Update in response to your edits in the question

nova days [now a days] even EPROMS are writable ???? if you can write into memory there is no such thing like immutability :)

 

besides rooted device is vulnerable for fs files altering

###How does the client trust the server's certificate?

Update in response to your edits in the question

nova days [now a days] even EPROMS are writable ???? if you can write into memory there is no such thing like immutability :)

besides rooted device is vulnerable for fs files altering

How does the client trust the server's certificate?

• Android Security: Adding Tampering Detection to Your App
• Retrieve the apk signature at runtime for Android

• Android Security: Adding Tampering Detection to Your App
• Retrieve the apk signature at runtime for Android

How does SSL/TLS work?

How does SSL/TLS work?