12 ms·
Certificate pinning would defeat this. Bake it into your app that you only trust a specific certificate regardless of what is in the system trust store.
by semiquaver 3y ago
Certificate pinning would defeat this. Bake it into your app that you only trust a specific certificate regardless of what is in the system trust store.
- hifromwork 3y agoInterestingly, not always. For example apple computers will intentionally ignore your pinning attempts in some cases: https://daniel.haxx.se/blog/2024/03/08/the-apple-curl-security-incident-12604/ https://daniel.haxx.se/blog/2024/03/08/the-apple-curl-securi...
- semiquaver 3y agoYikes, that’s a good reason not to use the system LibreSSL or curl provided with macOS.