Root certificate changes

phunction

Hi, I received an email stating that:

...you own one or more active Dropbox API apps using a version of an official Dropbox SDK with an outdated certificate trust store...

However when reading the blog post, it states for the .net sdk

• .NET SDK v7.0.0 or greater
  • Note that apps using older versions of the .NET SDK are only affected if they call DropboxCertHelper.InitializeCertPinning().

I don't use DropboxCertHelper.InitializeCertPinning(), so I want to clarify that my app will be OK, and I don't have to rush out a change before January?

Thanks

Eathen cole 3

Hi there 

You’re absolutely right to double-check this — Dropbox recently updated their SDKs due to changes in certificate trust stores, but the impact depends on how your app handles certificate pinning.

If your .NET app does not call Dropbox Cert Helper. Initialize Cert Pinning(), then you’re not affected by this change. The issue only impacts apps that manually initialize the older certificate pinning logic.

So as long as:

You’re using a Dropbox .NET SDK (even below v7.0.0), and

You don’t call Dropbox Cert Helper. Initialize Cert Pinning() anywhere in your code,

then you’re completely safe — there’s no urgent need to update before January. 

Still, it’s good practice to plan an SDK update when possible to stay aligned with Dropbox’s latest security improvements and bug fixes.

Hope that clears things up!