4 ms·
Any suggestions on how The Daily (or others) could prevent people from using tools like Charles to capture SSL traffic?
by bkaid 16y ago
Any suggestions on how The Daily (or others) could prevent people from using tools like Charles to capture SSL traffic?
- pretz 16y agoVerify the certificate you get during the SSL connection is the certificate you expect to see.
- moeffju 16y agoThey could verify the server's certificate. Even if the user installs a new (trusted) certificate - as in this case - the app could still check the certificate information (fingerprint, domain name, O, etc.).
- bkaid 16y agoI assume The Daily is using NSURLConnection. Doesn't NSURLConnection by default reject self signed certificates?