News for hackers. Stuff that matters.

A comment on Intent to deprecate: Insecure HTTP. Parent comment

Re:Intent to deprecate: Insecure HTTP by timothya on Tuesday April 14, 2015 @01:05AM (#9372203)
Certificate pinning [0] is a common way.

[0]: http://en.wikipedia.org/wiki/Transport_Layer_Security#Certif...

[ Parent | on HN ]
Re:Intent to deprecate: Insecure HTTP by lisper on Tuesday April 14, 2015 @02:08AM (#9372383)
Right. Because no one ever changes a certificate legitimately.
[ Parent | on HN ]