Forum Discussion
msamir_312520
Nimbostratus
NimbostratusSSL pinning
We are in development stage for mobile app and we successfully integrate Frond end application server with F5 ASM . We have new change request in order to secure mobile application with SSL certific...
Simon_Waters_13
Cirrostratus
CirrostratusNo, the F5 probably can't make your Android app pin.
You can use HPKP to pin certificates in browsers, but it is unlikely that mobile apps will honour these settings, since it requires client side state to be preserved between visits.
There should be no MITM with TLS unless the user or the device has added a trusted CA. But if you want to pin and many mobile apps do, you'll what to change the app.
