Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It protects against things other than the intended client modifying the data. Someone said we need cert pinning to protect data integrity in the face of MITM. I am saying signing your requests solves MITM modifying the traffic, so you don’t need cert pinning. Solving binary integrity in hostile compute environments is a different problem.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: