Protecting data in transit.
WHAT TO USE
Encrypted connections, without exception.
WHAT TO PROHIBIT
Plain unencrypted traffic, which both platforms block by default.
WHAT TO NEVER DO
Disable certificate validation to make development easier.
WHY
It is frequently left disabled, and it removes all protection.
WHAT CERTIFICATE PINNING DOES
Restricts which certificates are accepted, beyond the normal chain.
WHAT IT PROTECTS AGAINST
Interception using a certificate the device otherwise trusts.
WHAT IT COSTS
An application that breaks when certificates rotate.
WHAT THAT REQUIRES
A rotation plan, backup pins, and a way to update.
WHY THAT MATTERS ENORMOUSLY ON MOBILE
A pinning failure cannot be fixed without a release, and users may not update.
WHAT TO CONSIDER
Whether the threat justifies the operational risk.
WHAT TO SEND
The minimum necessary.
WHAT TO NEVER SEND
More personal data than the feature requires.
WHAT TO VALIDATE
Every response, rather than assuming its shape.
WHAT TO TEST
Behaviour when a proxy attempts interception.
