3 ms·
Does this mean Chrome on iOS will reject these certs? It's a bit unclear. I know they have to use the Safari rendering engine but I'm curious if there are any o
by codezero 12y ago
Does this mean Chrome on iOS will reject these certs? It's a bit unclear. I know they have to use the Safari rendering engine but I'm curious if there are any other internals at play here.
- geofft 12y agoI believe iOS lets you specify your own validation callback. (For instance, I think best practice is for a random app on iOS, that only connects to its own servers for an API, to manually pin the public key and a backup public key for the server or at best a handful of CAs, instead of trusting the entire set of root CAs.) I don't know how extensively Chrome is using that feature.