How would you implement certificate pinning (SSL pinning) on iOS?
In the URLSessionDelegate authentication challenge you run the default SecTrust evaluation, compare the public key hashes from the server's certificate chain against pins built into the app, and continue with .useCredential only on a match.
SecurityShort answerAdvanced
Your app pins the server's public key, and your security policy rotates the server…
#certificate #public-key
SecurityMultiple choiceBasics
What conditions have to hold before a tool like Charles or Proxyman can show an app's…
#certificate #mitm
SecurityMultiple choiceBasics
An app pins by hardcoding the SHA-256 hash of the leaf certificate. What happens first…
#ssl-pinning
SecurityShort answerExpert
QA reports that with a Charles proxy in place they see every API request and response…
#mitm