3 ms·
> However, what we’ve learned is that almost all customers that were impacted by the change were unaware that they had a certificate pin in place. All that len
by ivewonyoung 2y ago
> However, what we’ve learned is that almost all customers that were impacted by the change were unaware that they had a certificate pin in place.
All that lengthy blog post and no explanation of what configuration is causing this and in what kinds of software. And how to find certificate pins in your infrastructure.
Anyone know?
- aflukasz 2y agoWell, it's on a software component by component basis, so not much they could have done here, I guess. Look for any settings or in-code references related to ssl/tls. You then may find references to some local paths, pointing to certificate files. Or to cert strings compiled into the binaries. Depending on the details, this may indicate pinned certs.