3 ms·
Are you saying that most apps don't rely on the system Trust Store? I believe manually trusting Fiddler's cert adds it to the Trust Store. The only iOS apps
by ROARosen 5y ago
Are you saying that most apps don't rely on the system Trust Store?
I believe manually trusting Fiddler's cert adds it to the Trust Store.
The only iOS apps I couldn't successfully MITM with this were stock Apple apps.
- llacb47 5y agoTry Twitter, Instagram, Twitch, etc.
- judge2020 5y agoWhat happens is that apps don't work if their cert is issued by another CA, eg. "we only use digicert so any other CA issuing us is either attacking us or a enterprise/hobbyist MITM which we don't care about anyways".
- TechBro8615 5y agoI would bet that > 75% of the top 50 apps use SSL pinning. Apple makes it really easy to do and it's an obvious first defense against reverse engineering.