Experimental News Clipping Site

Tag: certificate pinning

  • CSA: Technical Debt vs. Challenges: Know the Difference

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.zscaler.com/cxorevolutionaries/insights/knowing-difference-between-two-types-technical-challenges-key-smarter-decisions Source: CSA Title: Technical Debt vs. Challenges: Know the Difference Feedly Summary: AI Summary and Description: Yes Summary: The text outlines the distinction between vendor-related and technology-related challenges in technical problem-solving, specifically highlighting the implications for cybersecurity and infrastructure. It emphasizes the importance of understanding the nature of the problem in order…

  • Hacker News: Disabling cert checks: we have not learned much

    —

    by

    Kurt Seifried
    in

    Source URL: https://daniel.haxx.se/blog/2025/02/11/disabling-cert-checks-we-have-not-learned-much/ Source: Hacker News Title: Disabling cert checks: we have not learned much Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses the critical significance of certificate verification in SSL/TLS communication, particularly highlighting the history and evolution of the curl and libcurl libraries in handling SSL verification. It emphasizes the…

  • Hacker News: F-Droid Fake Signer PoC

    —

    by

    system automation
    in

    Source URL: https://github.com/obfusk/fdroid-fakesigner-poc Source: Hacker News Title: F-Droid Fake Signer PoC Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses vulnerabilities in the APK signing process for Android, specifically how certain implementations of fdroidserver and related tools can be exploited, leading to potential bypasses of certificate pinning. This is critical for professionals…

  • Hacker News: Avoiding downtime: modern alternatives to outdated certificate pinning practices

    —

    by

    system automation
    in

    Source URL: https://blog.cloudflare.com/why-certificate-pinning-is-outdated Source: Hacker News Title: Avoiding downtime: modern alternatives to outdated certificate pinning practices Feedly Summary: Comments AI Summary and Description: Yes Summary: The text critically examines the practice of certificate pinning in the evolving landscape of Public Key Infrastructure (PKI). It highlights the risks and management challenges associated with keeping pinned certificates…