Hacker News new | ask | show | jobs
by bzbarsky 4216 days ago
> Without cert pinning

In the case of Firefox connecting to addons.mozilla.org, there is cert pinning.

1 comments

I didn't know that, thanks.

(In retrospect, it's such an obvious thing for them to do - I don't know why I didn't assume it was likely enough to be implemented and check before I posted that...)

To be fair, I _think_ the pinning was only added in Firefox 32, back in September. So it's a pretty recent development.