3 ms·
How does that work with chromes certificate pinning for google? Do they do some runtime modification (e.g. DLL-injection) to disable the check?
by rocqua 10y ago
How does that work with chromes certificate pinning for google? Do they do some runtime modification (e.g. DLL-injection) to disable the check?
- ThisIs_MyName 10y agoCert pinning ignores root certs. This is by design :( >The Chromium browser disables pinning for certificate chains with private root certificates to enable various corporate content inspection scanners and web debugging tools (such as mitmproxy or Fiddler). The RFC 7469 standard recommends disabling pinning violation reports for "user-defined" root certificates, where it is "acceptable" for the browser to disable pin validation.
- voltagex_ 10y agoThe alternative would be no Chrome and/or Firefox at my workplace, and many others.
- chopin 10y agoIt does not work with certificates installed by the user.