4 ms·
In security, certificate pinning is a good practice because it defends against, who guessed it, MITM.
by p410n3 6y ago
In security, certificate pinning is a good practice because it defends against, who guessed it, MITM.
- jeroenhd 6y agoObviously. Few apps (outside the very big ones) actually do it though, and with root access any attempt at cert pinning is trivially bypassed of course. Annoyingly, many telemetry providers seem to have implemented cert pinning because I can no longer inspect the traffic flowing to telemetry endpoints from my phone without rooting it. That's quite a pain in my opinion. I'm fine with being unable to see my bank's traffic, but I want to know why the MS launcher is uploading kilobytes of information every minute instead of just deleting it entirely. That's the downside of being a power user, of course; the features I want cannot be made available to the general public in good faith because bad governments and companies will abuse them.