https://community.isc2.org/t5/Tech-Talk/Certificate-Pinning-in-Mobile-Apps/m-p/43562#M3164 <P>I'm looking for the "best practice" to use in Certificate Pinning or an Alternative.</P><P>&nbsp;</P><P><STRONG>Scenario:&nbsp;</STRONG> I have a native mobile app and I have pinned the certificate so that the app can validate against my server.&nbsp;&nbsp;</P><P>&nbsp;</P><P><STRONG>Problem:</STRONG> The problem comes in 1 year when the certificate expires where I need to have all my app users update their app with the new certificate version OR the app will simply not work.</P><P>&nbsp;</P><P><STRONG>Desired Outcome:&nbsp;</STRONG> I would like to update the certificate pinned in the mobile app without having to have the users update to a different version of the app.</P><P>&nbsp;</P><P>&nbsp;</P> Thu, 25 Feb 2021 21:43:17 GMT tim2 2021-02-25T21:43:17Z https://community.isc2.org/t5/Tech-Talk/Certificate-Pinning-in-Mobile-Apps/m-p/43562#M3164 <P>I'm looking for the "best practice" to use in Certificate Pinning or an Alternative.</P><P>&nbsp;</P><P><STRONG>Scenario:&nbsp;</STRONG> I have a native mobile app and I have pinned the certificate so that the app can validate against my server.&nbsp;&nbsp;</P><P>&nbsp;</P><P><STRONG>Problem:</STRONG> The problem comes in 1 year when the certificate expires where I need to have all my app users update their app with the new certificate version OR the app will simply not work.</P><P>&nbsp;</P><P><STRONG>Desired Outcome:&nbsp;</STRONG> I would like to update the certificate pinned in the mobile app without having to have the users update to a different version of the app.</P><P>&nbsp;</P><P>&nbsp;</P> Thu, 25 Feb 2021 21:43:17 GMT https://community.isc2.org/t5/Tech-Talk/Certificate-Pinning-in-Mobile-Apps/m-p/43562#M3164 tim2 2021-02-25T21:43:17Z