New answers tagged ios
1
The short answer is that it depends on the application's implementation. Certificate pinning is not a default, it is rather a custom implementation. Default is to rely on system trust store - on iOS as well as Android.
In general the security best practice is to use SSL pinning. Pinning could be implemented in two ways - Including the entire certificate ...
3
Relevant talk: https://media.ccc.de/v/36c3-10737-sim_card_technology_from_a-z
Our phones blindly connect to them every day.
Wrong, towers need to authenticate; if you're not using obsolete 2G ciphers, that auth can and will be relatively secure.
In fact, attackers can set up rogue towers that trick phones into connecting to them instead in order to ...
Top 50 recent answers are included
