Note: I’m more familiar with browser to server pinning (HTTP Public Key Pinning – HPKP) rather than app to server pinning, but I presume the principal is the same. In HPKP the pinning policy is provided by the server as a HTTP header but understand this is often built into the app rather than read … Read more
Since this is a programming web-site, i wanted to explain how to calculate the public key hash for Public Key Pinning. This is important because the algorithm is completely undocumented. (It’s not even documented by the canonical RFC 7469 Public Key Pinning Extension for HTTP ! The RFC simply says “Use OpenSSL”. That is a … Read more
Edit 4/3/19: I have found a workaround. This is tested on Chrome for Mac 73.0.3686.86 64-bit, platform: macOS 10.14.4: Open a new TextEdit document. In TextEdit, click Format | Make Plain Text. Arrange windows so that the TextEdit window and the Chrome window are both visible. In Chrome, click the icon to the left of … Read more