4 ms·
> It is also worth noting that certificate pinning in Chrome was deliberately weakened to accept a self signed CA certificate in order to maintain compatibility
by ryan-c 11y ago
> It is also worth noting that certificate pinning in Chrome was deliberately weakened to accept a self signed CA certificate in order to maintain compatibility with the aforementioned corporate web filters.
All major browsers (including firefox) allow MitM for a user installed CA. This is not Chrome-specific.
- hueving 11y agoDo the other browsers support certificate pinning though?
- ryan-c 11y agoFirefox does. IE will eventually and it will also ignore errors caused by user install certs when it does (no, I don't have a source on this, but I am very confident that it will).
- magicalist 11y agoFirefox does. http://caniuse.com/#feat=publickeypinning http://caniuse.com/#feat=publickeypinning