New answers tagged key-exchange
IIRC, and I could be wrong, This is because it was using self signed certs that were generated psuedo on-the-fly. Because of this, if you reverse engineer the interception mechanism you could extract the private key
Certificate Pinning is another commonly used control against Data-in-transit attacks. The TLS handshake never starts if the client doesn't receive a Public Key that is within the client's (the mobile app) known Pin List. I used Cert Pinning as a compliment to payload encryption. Perhaps the following are becoming the base standard for sensitive mobile app ...
You can solve this by using deployment tools such as Chef or Ansible. Particularly about Chef, you have the Chef Push to push whatever cookbook (i.e. the key files) to all the nodes (i.e. the servers).
Top 50 recent answers are included