3 ms·
It can be crazier than that. App makers who work with important APIs often pin to specific certificates (not signers) so we have an one final absolute emergency
by KirinDave 7y ago
It can be crazier than that. App makers who work with important APIs often pin to specific certificates (not signers) so we have an one final absolute emergency measure to kill a version and force an upgrade when we have to.
- punnerud 7y agoThat is what I refer to as pinned-certificate. Not often used except from some of the biggest companies like Facebook and Snapchat. See my answer on how to go around this.
- KirinDave 7y agoYour answer sure wouldn't work for my tiny startup's app's pinning and we followed a guide initially.