4 ms·
Yes Also, the "Understanding the trade-offs of different certificate pinning implementations" misses one important thing : you can pin the CA, and still requir
by JackSlateur 2y ago
Yes
Also, the "Understanding the trade-offs of different certificate pinning implementations" misses one important thing : you can pin the CA, and still requires the cert to be valid for your FQDN
I've seen this a couple of time, and this is wonderful : fully secure, and denies the managed mitm setup by the security team.
- patrakov 2y agoAnd the only one time where I have seen this (in a private discussion of the mobile app with a bank employee), they said that they see no valid use case for a managed MitM against their production website. Preventing proxies like Charles and mitmproxy from working was one of their explicit goals for the app.