How to detect SSL pinning on Android

2020-07-17 14:57发布

问题:

I already have installed and configured sslsplit and generated the root certificate, and added it to the mobile phone (Android).

How to detect SSL pinning?

回答1:

An app that uses SSL certificate pinning or public key pinning should fail to communicate with the server when you place a proxy in between the mobile device and the server it communicates with (because it would receive ssl split's certificate instead of the server's in the certificate chain).

If the app fails to communicate with the server - it means that certificate pinning is working.



标签: android ssl