Confirmed users
238
edits
SecurityEngineering/Public Key Pinning: Difference between revisions
SecurityEngineering/Public Key Pinning (view source)
Revision as of 18:06, 2 August 2014
, 2 August 2014no edit summary
No edit summary |
|||
| Line 30: | Line 30: | ||
Tracking bug for pinning all the things: {{bug|1004350}} | Tracking bug for pinning all the things: {{bug|1004350}} | ||
== How to use pinning == | |||
Starting with FF 32, it's on by default, so you don't have to do anything. The pinning level is enforced by a pref, security.cert_pinning.enforcement_level | |||
0. Pinning disabled | |||
1. Allow User MITM (pinning not enforced if the trust anchor is a user inserted CA, default) | |||
2. Strict. Pinning is always enforced. | |||
3. Enforce test mode. | |||
== More information == | == More information == | ||