Facebook Really Is Spying on You, Just Not Through Your Phone's Mic

Re:Facebook Really Is Spying on You, Just Not Through Your P... by feelin_googley on Wednesday March 07, 2018 @05:17PM (#16540487)

Is there any reason that pinning should not be optional?

In other words, any reason that the user should not be able to "disable" it? (Use own root CA.)

Consider that in this case, the data being transferred to Facebook belongs to the user.

Is it unreasonable for a user to require that they be able to see what data is being transferred before they agree to transfer it?

[ Parent | on HN ]

Re:Facebook Really Is Spying on You, Just Not Through Your P... by fjsolwmv on Wednesday March 07, 2018 @08:10PM (#16541451)

Enterprises do this on PC --- they have to be able to MITM all their user's traffic. Not sure how mobile devices are covered.

As for transparency, look to GDPR and friends to see what rights are being declared.

[ Parent | on HN ]

Re:Facebook Really Is Spying on You, Just Not Through Your P... by JetSpiegel on Thursday March 08, 2018 @01:37AM (#16542750)

Considering that certificate pinning protects hacked user devices from making insecure communications, it would completely defeat the point if the user could disable it.

[ Parent | on HN ]

Re:Facebook Really Is Spying on You, Just Not Through Your P... by leni536 on Thursday March 08, 2018 @03:08AM (#16543061)

I don't think so. Certificate pinning protects from rouge CAs.

[ Parent | on HN ]