News for hackers. Stuff that matters.

A comment on How did Facebook intercept their competitor's encrypted mobile app traffic?. Parent comment

Re:How did Facebook intercept their competitor's encrypted m... by liuliu on Saturday July 27, 2024 @10:44PM (#41090887)
Snapchat do certificate pinning for it's main API domain. I am not exactly sure why analytics domain are different and why not have certificate pinning. (I thought analytics go through the same API domain, but it must be wrong then).
[ Parent | on HN ]
Re:How did Facebook intercept their competitor's encrypted m... by haxrob on Sunday July 28, 2024 @01:27AM (#41091399)
The analytics domain was "sc-analytics.appspot.com" in which the lack of pinning is described at the tail end of the blog post.
[ Parent | on HN ]