3 ms·
> everyone will be so used to certificates changing all the time, and no certificate pinning anymore Browser certificate pinning is deprecated since 2018. No c
by precommunicator 1y ago
> everyone will be so used to certificates changing all the time, and no certificate pinning anymore
Browser certificate pinning is deprecated since 2018. No current browsers support HPKP.
There are alternatives to pinning, DNS CAA records, monitoring CT logs.
- blincoln 1y agoCert pinning is a very common practice for mobile apps. I'm not a fan of it, but it's how things are today. Seems likely that that will have to change with shorter cert lifetimes.