3 ms·
> It will put a hard "expiration date" on the device's functionality when a link in the PKI chain expires. If you're certificate pinning an IP address for use
by black3r 6y ago
> It will put a hard "expiration date" on the device's functionality when a link in the PKI chain expires.
If you're certificate pinning an IP address for use with your own software, you can just create a self-signed cert with expiration date set to 2999 or some commonly ridiculous date you don't expect your devices will live to.
- wang_li 6y agoWhy would they do that when they can force you to update your firmware by setting the expiration to a year or even less. This way you are guaranteed to be communicating with the mothership and the devices will incorporate any new malfeatures the manufacturer conceives.