Tool Release: Exploring SSL Pinning on iOS
ID: 524053ec-c1de-510d-90e9-ae3ae7c6542a
STIX ID: report--524053ec-c1de-510d-90e9-ae3ae7c6542a
Feed Name: NCC Research
This research note from iSEC (now NCC Group) describes an SSL pinning implementation for iOS, explaining the SSLCertificatePinning API and SSLPinnedNSURLConnectionDelegate, how to load and verify pinned DER-encoded certificates, and practical limitations including partial public-key pinning support, inability to reliably pin within UIWebView, and limited revocation checking.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.