SecurityByteDance
Proxies decrypting HTTPS
What conditions have to hold before a tool like Charles or Proxyman can show an app's HTTPS request bodies in the clear? Pick all that apply.
Pick all that apply
Up next
SecurityShort answerExpert
QA reports that with a Charles proxy in place they see every API request and response fro…
#charles #proxy #mitm #pinning
NetworkingShort answerBasics
How can tools like Charles and Proxyman show app traffic that's encrypted with HTTPS in p…
#charles #proxy #mitm
SecurityShort answerAdvanced
How would you implement certificate pinning (SSL pinning) on iOS?
#mitm #certificate
SecurityShort answerAdvanced
Your app pins the server's public key, and your security policy rotates the server certif…
#certificate #pinning