rene_mobile’s avatarrene_mobile’s Twitter Archive—№ 2,385

        1. @ikoz presenting the details on how to properly do TLS pinning on Android #AndroidSecuritySymposium
          oh my god twitter doesn’t include alt text from images in their API
      1. …in reply to @rene_mobile
        @ikoz nice takeaway: nr. of trusted root CAs is actually going down over time, iOS trusts (slightly) more than Android, MS ridiculously high
        oh my god twitter doesn’t include alt text from images in their API
    1. …in reply to @rene_mobile
      @ikoz when pinning goes wrong... That's one example why it is important to do pinning correctly.
      oh my god twitter doesn’t include alt text from images in their API
  1. …in reply to @rene_mobile
    @ikoz Takeaways: - don't skip chains - don't do X.509 chain validation yourself (!!!) - libraries do it wrong too #AndroidSecuritySymposium