3 ms·
Why didn't a big company like Snapchat not have certificate pinning? Something is amiss here!?
by Crazyontap 2y ago
Why didn't a big company like Snapchat not have certificate pinning? Something is amiss here!?
- liuliu 2y agoSnapchat do certificate pinning for it's main API domain. I am not exactly sure why analytics domain are different and why not have certificate pinning. (I thought analytics go through the same API domain, but it must be wrong then).
- haxrob 2y agoThe analytics domain was "sc-analytics.appspot.com" in which the lack of pinning is described at the tail end of the blog post.
- theptip 2y agoFrom the OP, Snapchat started pinning not long after this program launched.