News for hackers. Stuff that matters.

A comment on Reddit experiments on users, forcing them to install app or else not use Reddit. Parent comment

Re:Reddit experiments on users, forcing them to install app ... by freedomben on Monday June 12, 2023 @01:15PM (#36297135)
> it's even easier than that as all apps (except native ones) will be using the java TrustManager interface

Is this required? i.e. do all apps have to use the TrustManager interface to accomplish cert pinning, or is that merely the official way?

[ Parent | on HN ]
Re:Reddit experiments on users, forcing them to install app ... by blibble on Monday June 12, 2023 @01:31PM (#36297498)
> Is this required?

well, Java is Turing complete, so you could completely re-implement TLS yourself instead of using the API that comes with the platform

in practice no-one is going to do that

[ Parent | on HN ]