iOS
Similar actions can be used to pin to certificates and/or public key fingerprints of certificates in iOS. Pinning is performed through the NSURLConnectionDelegate, where connection:canAuthenticateAgainstProtectionSpace: and connection:didReceiveAuthenticationChallenge:. must be implemented within connection:didReceiveAuthenticationChallenge:, and call SecTrustEvaluate to perform X509 validation checks. A sample iOS pinning application provided by OWASP can be used as a reference when deploying such checks in applications. The sample program can be downloaded via the following link:
https://www.owasp.org/images/9/9a/Pubkey-pin-ios.zip
Aside from the general best practices that all applications should follow when employing TLS, iOS has ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access