BSidesSF 2015 - Stick a Pin in Cert Pinning: How to Inspect Mobile Traffic ... (Gopal Jayaraman)

Stick a Pin in Certificate Pinning: How to Inspect Mobile Traffic and Stop Data Exfiltration
Gopal Jayaraman

With the rise of encrypted traffic, more and more companies are deploying SSL inspection platforms to decrypt SSL. Unfortunately, these companies quickly discover that they cannot decrypt all traffic, particularly communications to mobile apps that use certificate pinning.

What is certificate pinning? It’s a method of preventing Man in the Middle (MitM) attacks by validating server certificates against known, approved certificates or hashes …

bsidessf cert certificate certificate pinning companies data data exfiltration decrypt discover encrypted encrypted traffic exfiltration inspection mobile mobile traffic pin pinning platforms quickly ssl ssl inspection traffic