Building secure native apps with self-signed SSL certificates using Certificate Pinning
The text discusses mobile native app development and how modern apps provide rich user interfaces with complex functionalities across multiple workflows. These workflows involve secure data exchange between the native app on the device and the app's backend servers in real-time. The article outlines a unique approach to validate the backend server's custom SSL certificate at runtime, enabling a uniform development and testing approach for such native apps on both Android and iOS. It covers the concepts of Certificate Bundling and Pinning, their high-level use cases, implementation steps, benefits, and limitations. The article also provides reference sample GitHub projects demonstrating end-to-end examples in action for both Android and iOS.
Company
BrowserStack
Date published
May 5, 2021
Author(s)
Samiran Saha
Word count
2328
Language
English
Hacker News points
None found.