ZitchCode / SecureHttpClient

Cross-platform HttpClientHandler with TLS1.2 and Certificate Pinning
MIT License
33 stars 6 forks source link

[Question] How trusted roots and pins work together? #8

Closed alexrainman closed 5 years ago

alexrainman commented 5 years ago

When you provide a trusted root, is it used instead of the provided pins?

alexrainman commented 5 years ago

I understand now ho it works on iOS https://github.com/tranb3r/secure-httpclient/blob/master/SecureHttpClient/Platforms/iOS/DataTaskDelegate.cs#L151

What happen in Android if you don't provide TrustedRoots?

tranb3r commented 5 years ago

I'm not sure I understand your question. Maybe it's easier to test and see if it fits your use-case ?

alexrainman commented 5 years ago

No worries, I got it.