3 ms·
What is user hostile about SSL pinning? Would the user not want to know when the certificate does not match up?
by joshuaissac 7y ago
What is user hostile about SSL pinning? Would the user not want to know when the certificate does not match up?
- labawi 7y agoEDIT: The user will not be informed the certificates don't match up. He already knows as it is meant to dissuade user's traffic inspection. It makes traffic inspection of your own devices hard. If you warn and ask the user, then fine, but I believe it was meant as mandatory.