4 ms·
A well-designed OS API doesn't need to do MitM and therefore would work with HSTS or cert pinning enabled. Of course for obvious reasons, few commercial apps w
by kccqzy 4y ago
A well-designed OS API doesn't need to do MitM and therefore would work with HSTS or cert pinning enabled.
Of course for obvious reasons, few commercial apps would actually use this API unless they have some other incentive.
- 3pt14159 4y agoWell, the original article was about Microsoft. Since they're the OS vendor too, I discounted that as being reliable for this use-case.