4 ms·

What stops a malicious app from spoofing that?

• arthurcolle 6y ago
  TLS?
  • zepto 6y ago
    How? A spoofed app would have the client certificate taken from the real app.
    • arthurcolle 6y ago
      but it wouldn't have the private key associated with the certificate
      • zepto 6y ago
        Client cert - not server.
• hhggfdss 6y ago
  Nothing but if your bank delivered the app to you over SSL signed with their certificate then you know it's not malicious. Add in a checksum if you feel extra paranoid. These are old and solved problems. If they were real problems there would be no online banking at all.