3 ms·
Don't rely on client side data. Pin certificates in mobile apps.
by nstj 11y ago
Don't rely on client side data. Pin certificates in mobile apps.
- Spivak 11y agoYou're still trusting client side data. What's stopping a more advanced user from replacing your pinned cert with theirs. Don't do any payment processing client side. Your app should be a pretty interface to the actual service running on your servers.