News for hackers. Stuff that matters.
Re:Ask HN: What do you do with your Raspberry Pi? by KirinDave on Tuesday June 25, 2019 @10:25AM (#20274493)
It can be crazier than that. App makers who work with important APIs often pin to specific certificates (not signers) so we have an one final absolute emergency measure to kill a version and force an upgrade when we have to.
Re:Ask HN: What do you do with your Raspberry Pi? by punnerud on Tuesday June 25, 2019 @10:29AM (#20274546)
That is what I refer to as pinned-certificate. Not often used except from some of the biggest companies like Facebook and Snapchat. See my answer on how to go around this.
Re:Ask HN: What do you do with your Raspberry Pi? by KirinDave on Tuesday June 25, 2019 @12:23PM (#20275803)
Your answer sure wouldn't work for my tiny startup's app's pinning and we followed a guide initially.