I originally posted this question on StackOverflow, but reposted here due to lack of responses.
I am trying to decide if it's a good idea to do ssl pinning in my iOS game that uses a server to deliver content. It seems like it's important, but the one thing that is really bothering me is the thought of the day that the certificate expires. Since the certificate has to be included in the app bundle, this means there will be a point where users will be forced to upgrade. Depending on what Apple is doing at that time, might mean they can't upgrade due to device / os constrictions. So, I am really nervous about putting this in.
Has anyone had any experience with ssl pinning and expired certificates, making this a seamless, no-down-time thing for your users?