Google may update Android’s root storage via Play Services on Android 14: report

Google is reportedly working on updating Android’s root storage via the Google Play Store on Android 14. The search giant’s current mechanism only updates root certificates as part of a full system update, which can cause devices running on older Android versions to be unable to connect to the internet when an expired root certificate is not recognized.

According to a report by AndroidPolice, tweet Posted by Mishaal Rahman on Twitter, Google may be working on a root certificate module introduced via the Google Play Services update. Root certificates are used to authenticate connected Android system devices to establish a secure connection. Introducing the root certificate module via Google Play Services will allow Google to push these updates when needed, while preventing the old model from falling off the trust mesh entirely.

This development may have been triggered by a particular root certificate authority, TrustCor, which is said to have ties to a company known to provide spyware intelligence services. Google has since started removing support for TrustCor certificates on its devices.

The Google Chrome version 111 update for desktops will drop root certificates issued by TrustCor marked as trusted. For Android, however, the change may take more time because its root certificate cannot be updated independently, Mishaal Rahman added in a blog post.

The latest development attempts to change that, with the search giant working to bundle root certificate updates into its Google Play Store service updates, which roll out when the company needs them.

It’s worth noting, however, that Google has yet to officially confirm its plans to push regular root certification updates through Play Store Services.