某天有人問我某: SSL Pinning (Certificate Pinning) 是什麼東西啊? ... 以Android 來說，可能會在Settings > Security > Trusted Credentials 看到 ... ... <看更多>

The SSL pinning (or public key, or certificate pinning) is a technique mitigating Man-in-the-middle attacks against the secure HTTPS communication. The typical ... ... <看更多>

Since Android API 24 it is possible to implement certificate pinning to the public key hash via the built-in security config file, that doesn't ... ... <看更多>

I have certificate pinning implemented in my iOS and Android apps. But when apps were pen-tested, we got the report from the pentester saying ... ... <看更多>

Universal Android SSL Certificate Pinning bypass with Frida . https://techblog.mediaservice.net/2018/11/universal-android-ssl-pinning-bypass-2/ ... <看更多>