It's very feasible to reverse engineer the Android APK for Facebook and replace the cert with your own. https://serializethoughts.com/2016/08/18/bypassing-ssl-

It's very feasible to reverse engineer the Android APK for Facebook and replace the cert with your own. https://serializethoughts.com/2016/08/18/bypassing-ssl-pinning-in-android-applications/ https://serializethoughts.com/2016/08/18/bypassing-ssl-pinni... http://blog.dewhurstsecurity.com/2015/11/10/mobile-security-certificate-pining.html http://blog.dewhurstsecurity.com/2015/11/10/mobile-security-...