What is SSL pinning?

In this episode of Ask A Dev, iOS engineer Marty Burolla gives us the 411 on SSL pinning, but not before providing us with a helpful rundown on the importance of secure web connections.

For starters, Burolla describes the three things a client application and server must agree on before establishing a secure connection: How will keys be exchanged? How will data be encrypted? How will messages be marked as authentic?

From there, he takes us all the way down the certification rabbit hole to where SSL pinning comes into play. He'll cover Public Key Pinning, Certificate Pinning, SPKI Pinning and everything else you need to know to make your apps as secure as possible. Read more...