TGViewer
DevOps & SRE notes DevOps & SRE notes @devops_sre_notes · 13.3K subscribers
Post #1832 2.71K
Certificate pinning was once a standard security measure to prevent man-in-the-middle attacks by associating a host with a specific TLS certificate or public key.However, the practice has become outdated and can lead to significant issues, such as service outages during certificate rotations or renewals.Modern security standards, including shorter certificate lifetimes, regular rotations of intermediate certificates, and increased use of certificate transparency logs, have addressed the original concerns that certificate pinning aimed to mitigate.These advancements offer enhanced security without the complexities and risks associated with pinning.Organizations are encouraged to adopt these contemporary practices to maintain robust security while ensuring operational stability.

https://blog.cloudflare.com/why-certificate-pinning-is-outdated/
Cloudflare Blog Avoiding downtime: modern alternatives to outdated certificate pinning practices Outages caused by certificate pinning is increasing. Learn why certificate pinning hasn’t kept up with modern standards and find alternatives to improve security while reducing management overhead
  • 👍 3
More from @devops_sre_notes
  1. Oct 12, 2026Post #2761
  2. Oct 9, 2026Post #2760
  3. Oct 8, 2026Post #2759
  4. Oct 8, 2026Post #2758
  5. Oct 6, 2026Post #2757
  6. Oct 5, 2026Post #2756
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →