pokeb/asi-http-request — Issue #307: SSL Pinning and/or CA Restriction Support
Author: jakehow
Created: 2012-02-26 20:33:06+00:00
State: open

I am not sure if this is possible with the frameworks available in iOS, but thought this may be a good place for discussion.

For background see: http://www.imperialviolet.org/2011/05/04/pinning.html
and: http://tools.ietf.org/html/draft-evans-palmer-hsts-pinning

We would like to be able to limit SSL communication in our application to using specified certificates, in order to eliminate the risks mentioned in the imperial violet article such as a rooted CA issuing a certificate to a rogue third party.