3 ms·
Friend of mine works at a really REALLY big bank. Works on their iOS app and their SSL cert is long expired. The iOS client does certificate pinning, so it isn
by ejcx 10y ago
Friend of mine works at a really REALLY big bank. Works on their iOS app and their SSL cert is long expired.
The iOS client does certificate pinning, so it isn't a huge security concern (although revocation would be a nightmare), but it does not surprise me that people are afraid of supporting TLS only for their apps.
- willstrafach 10y agoThat is fine though. ATS just ensures you are using TLS v1.2 and such, but doesn't enforce expiration / CRL / trusted roots / etc. That would be done in app, usually using default built-in frameworks but sometimes with custom logic to do things like certificate pinning.