Certificate pinning was once a standard security measure to prevent man-in-the-middle attacks by associating a host with a specific TLS certificate or public key.However, the practice has become outdated and can lead to significant issues, such as service outages during certificate rotations or renewals.Modern security standards, including shorter certificate lifetimes, regular rotations of intermediate certificates, and increased use of certificate transparency logs, have addressed the original concerns that certificate pinning aimed to mitigate.These advancements offer enhanced security without the complexities and risks associated with pinning.Organizations are encouraged to adopt these contemporary practices to maintain robust security while ensuring operational stability.
https://blog.cloudflare.com/why-certificate-pinning-is-outdated/
Post #1832
2.71K