Yes I already thought that it would be possible to extract the certificates including the password despite obfuscation. The documentation you‘ve linked is quit

Yes I already thought that it would be possible to extract the certificates including the password despite obfuscation. The documentation you‘ve linked is quite interesting - didn’t heard about this before, thanks! I also found that Cloudflare is currently adding support for device attestation: https://blog.cloudflare.com/private-attestation-token-device-posture/ https://blog.cloudflare.com/private-attestation-token-device... unfortunately it’s still in a closed beta. But that seems the way to go I guess. Out of curiosity could you provide me with some more details regarding how obfuscation does not help when storing the password for the certificate inside the source code?