4 ms·
Cert pinning doesn't solve that problem. Cert pinning solves the problem of a compromised CA signing false certificates. If an attacker has the private key of
by dlitz 13y ago
Cert pinning doesn't solve that problem. Cert pinning solves the problem of a compromised CA signing false certificates. If an attacker has the private key of the endpoint, cert pinning will do nothing.
- mpyne 13y agoI.e. the attacker completely simulates the desired endpoint since they have the priv key, DNS and all? I think that makes sense indeed.