The fix was in 3.1.0, actually. 3.1.2 is a bugfix for something completely
unrelated .

On Sun, Feb 14, 2016, 10:18 PM Brad Leege notifications@github.com wrote:

> Update Retrofit to use OkHttp 3.1.2 to address a Certificate Pinning
> Vulnerability that was discovered
> https://publicobject.com/2016/02/11/okhttp-certificate-pinning-vulnerability/
> .
> 
> —
> Reply to this email directly or view it on GitHub
> https://github.com/square/retrofit/issues/1600.

Update To OkHttp 3.1.2
Update Retrofit to use OkHttp 3.1.2 to address a [Certificate Pinning Vulnerability that was discovered](https://publicobject.com/2016/02/11/okhttp-certificate-pinning-vulnerability/).

pom.xml
pom.xml
diff --git a/pom.xml b/pom.xml
index 846b9c6c7a..3b28746998 100644
--- a/pom.xml
+++ b/pom.xml
@@ -49,7 +49,7 @@
 
     <!-- Dependencies -->
     <android.version>4.1.1.4</android.version>
-    <okhttp.version>3.1.1</okhttp.version>
+    <okhttp.version>3.1.2</okhttp.version>
     <animal.sniffer.version>1.14</animal.sniffer.version>
 
     <!-- Adapter Dependencies -->
