News for hackers. Stuff that matters.

A comment on Windows 10 has an undocumented certificate pinning feature. Parent comment

Re:Windows 10 has an undocumented certificate pinning feature by dpark on Sunday September 25, 2016 @01:30PM (#12576274)
Given that products like Fiddler still work against live.com domains on Windows 10, either the pinning isn't enabled, Fiddler knows how to bypass it, or this isn't actually related to pinning.
[ Parent | on HN ]
Re:Windows 10 has an undocumented certificate pinning feature by ccrush on Sunday September 25, 2016 @03:14PM (#12576865)
Or maybe the pinning isn't for IE, but for Windows sending MS hidden information it doesn't want you to know about.
[ Parent | on HN ]
Re:Windows 10 has an undocumented certificate pinning feature by dpark on Sunday September 25, 2016 @05:57PM (#12577675)
That's an awfully large list of domains for "hidden" telemetry. Hard to imagine why all of those would be specified for that. e.g. Some of those are just landing pages.

Disclosure: Microsoft employee

[ Parent | on HN ]