ConceptsCertificate Pinning

Certificate Pinning

A defense where an application is configured to trust only a specific certificate or key for a server, rejecting any other even if signed by a valid authority. It blocks attackers who obtain a fraudulent but technically valid certificate.

Glossary definition

6 direct links1 lesson

Concept Neighborhood

Explore this concept’s connections in the groups below.

PrerequisiteRelated

Start here

Certificate

The foundation Certificate Pinning builds on, worth understanding first.

Open concept →

Prerequisitelearn this first

CertificateStart here

A digital certificate is a signed electronic document that binds a public key to an identity, such as a website's domain, and is vouched for by a trusted certificate authority. It is what lets clients trust they are talking to the real party in HTTPS.

lesson

Relatedsorted by lesson coverage

HTTPS

lessons

ECDSA

lessons

Browser Warnings

lesson

Certificate Transparency

lesson

HSTS

lesson

Related Lessons

1 lesson covers this concept

HTTPS and TLS in the Browser

General Beginner