|Developer(s)||Microsoft Mobile Oy|
|Operating system||Series 40, Windows Phone, Asha Platform, Nokia X Software Platform (Android)|
Nokia Xpress (also called Xpress Browser) was a mobile browser developed by Nokia and supported by Microsoft until the end of 2015. It came loaded by default with Series 40, Asha Platform and Nokia X Software Platform,It uses the Gecko rendering engine. On Nokia feature phones it was replaced by Opera browser in early 2015.
Nokia Xpress Browser uses intermediate Nokia proxy servers to optimize web pages based on the capabilities and screen size of the device. The proxy servers also compress data to reduce data transmission charges for the mobile user. The browser was released for Lumia devices in 2012.
Like the Opera Mini, the Nokia Xpress browser decrypts and compresses HTTPS traffic, routing it through Nokia's own servers. This practice seeks to provide faster browsing for users of feature phones and smartphones with lower processing power (and thus lower bills for less mobile data usage). However, as pointed out by researcher Gaurang K. Pandya, this raises serious privacy concerns, because Nokia is essentially "performing Man In The Middle Attack for sensitive HTTPS traffic" and temporarily decrypting user data—which could be sensitive financial information, passwords. The company admitted to the technical details, but stated, "Claims that we would access complete unencrypted information are inaccurate". GigaOm criticized Nokia, which, unlike the Opera Mini, has failed to make it clear that HTTPS traffic will be decrypted during transit. It recommended that Nokia learn from Amazon's Silk browser, which leaves HTTPS traffic unperturbed.
The Xpress Browser reports the following user agents:
Nokia Lumia, Nokia 311:
Mozilla/5.0 (Series40; Nokia311/03.81; Profile/MIDP-2.1 Configuration/CLDC-1.1) Gecko/20100401 S40OviBrowser/184.108.40.206.31
Mozilla/5.0 (Series40; NokiaX3-02/le6.32; Profile/MIDP-2.1 Configuration/CLDC-1.1) Gecko/20100401 S40OviBrowser/220.127.116.11.10
Mozilla/5.0 (Series30Plus; Nokia225/20.10.11; Profile/Series30Plus Configuration/Series30Plus) Gecko/20100401 S40OviBrowser/18.104.22.168.0612
- Jaatinen, Tiina (26 January 2015). "Opera to give new life to classic Nokia phones". Lumia Conversations.
- Nokia Developer - Nokia Asha — Platform overview. Developer.nokia.com. Retrieved on 2013-08-21.
- https://web.archive.org/web/20130306123414/http://www.nokia.com/global/privacy/privacy/faqs/xpress-browser/. Archived from the original on March 6, 2013. Retrieved March 12, 2013. Missing or empty
- Viswav, Pradeep (10 March 2012). "Nokia Xpress Browser Beta Now Available For Lumia Windows Phone Devices.". Windows Mobile PowerUser.
- "Opera for mobile". Opera Software. Retrieved 2013-09-03.
- "What is Opera Mini?". Opera. Archived from the original on 2010-03-24.
- Gaurang K. Pandya (9 January 2013). "Nokia’s MITM on HTTPS traffic from their phone". Treasure Hunt blog. Retrieved 30 December 2013.
- Meyer, David (10 January 2013). "Nokia: Yes, we decrypt your HTTPS data, but don’t worry about it". GigaOm. Retrieved 30 December 2013.
- Auerbach, Dan (19 October 2011). "EFF Gets Straight Privacy Answers From Amazon About New "Silk" Tablet Browser". EFF Deeplinks blog. Retrieved 30 December 2013.
- User-Agent headers for Nokia devices - Nokia Developer Wiki. Developer.nokia.com. Retrieved on 2013-08-21.