Certificate Pinning
A security mechanism in which a client pre-records and pins the hash of a server's certificate or public key, accepting only certificates that match the stored value. This approach effectively prevents man-in-the-middle attacks and certificate forgery.
Core Facts
Timeline (last 90 days)
For high-security scenarios, certificate pinning can effectively defend against man-in-the-middle attacks caused by compromise of an intermediate CA, but flexibility and operational complexity must be weighed.
All Facts (2)
Certificate pinning hardcodes the expected server certificate fingerprint in the code, refusing the connection as soon as a certificate mismatch is detected
65%UnverifiedFor high-security scenarios, certificate pinning can effectively defend against man-in-the-middle attacks caused by compromise of an intermediate CA, but flexibility and operational complexity must be weighed.
50%