https://www.sans.org/reading-room/whitepapers/critical/android-security-web-browsers-email-applications-37227