5
votes
Static vs dynamic certificate pinning
I don't think "static pinning" and "dynamic pinning" are well-known or well-defined terms.
Certificate pinning restricts which certificates to trust by configuring several keys of ...
- 34.4k
4
votes
Accepted
Static vs dynamic certificate pinning
The terms seem to be mostly used for mobile apps. In browsers, there was only one type of key pinning available to the general public (HPKP), and this is long obsolete due to major issues like the ...
- 22.9k
3
votes
Accepted
How to determine hashing algorithm of a public key in the certificate?
That information isn't specified, because it's completely at the discretion of the private key holder every time they choose to sign some data. Instead, the full signing algorithm (hash function ...
- 52.1k
2
votes
In TLS 1.2 why are certificate signature algorithms not limited by supported cipher suites?
The hash algorithm in the cipher suite has nothing to do with signatures. It's used to specify the message authentication code (MAC) which protects the integrity of TLS records. TLS 1.2 uses the hash-...
- 22.9k
2
votes
Using HTTPS for local interprocess communication, and certificates
Do not ship certificates nor keys with the application package
Your question does not state whether you generate the certificate on the system during installation or use static self-signed ...
- 19.4k
Only top scored, non community-wiki answers of a minimum length are eligible