Pinning and key rotation
Your app pins the server's public key, and your security policy rotates the server certificate and key on a schedule. How does the client learn the new public key, so users on the old app version aren't all cut off right after a rotation?
SecurityShort answerAdvanced
How would you implement certificate pinning (SSL pinning) on iOS?
#certificate #public-key
SecurityMultiple choiceBasics
What conditions have to hold before a tool like Charles or Proxyman can show an app's HTT…
#pinning #certificate
SecurityMultiple choiceBasics
An app pins by hardcoding the SHA-256 hash of the leaf certificate. What happens first wh…
#rotation
SecurityShort answerExpert
QA reports that with a Charles proxy in place they see every API request and response fro…
#pinning