Confirmed users
238
edits
SecurityEngineering/CertificateVerification: Difference between revisions
SecurityEngineering/CertificateVerification (view source)
Revision as of 21:19, 12 May 2014
, 12 May 2014no edit summary
(Created page with "Certificate pinning is a protocol for sites to specify which certificate authorities have issued valid certs for that site, and for user-agents to reject TLS connections to th...") |
No edit summary |
||
| Line 2: | Line 2: | ||
We are attempting to: | We are attempting to: | ||
# Pin all of the sites that Chrome already does (Google, Twitter) | |||
# Pin our own sites after auditing them and cleaning them up, so that our users know that the updates we serve actually come from us | |||
# Pin other popular sites like Facebook that are in good shape already (with their cooperation, of course) | |||
Tracking bug: {{bug|1004350}} | Tracking bug: {{bug|1004350}} | ||