search

datatheorem / TrustKit

Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.
MIT License
2.01k stars 362 forks source link

Bump OS support versions in September #232

Closed adamkaplan closed 3 years ago

adamkaplan commented 4 years ago

As iOS 14 is being released in several weeks, it would be nice to bump minimum support from the iOS 10 generation to the iOS 11 generation (+tv, watch, mac). This would maintain N-3 major OS version support (iOS 11, 12, 13, 14).

The main benefit of this change would be removal of the two insecure coding branches: https://github.com/datatheorem/TrustKit/blob/master/TrustKit/Pinning/TSKSPKIHashCache.m#L201 https://github.com/datatheorem/TrustKit/blob/master/TrustKit/Pinning/TSKSPKIHashCache.m#L226

Which are periodically flagged by Yahoo security (even though we don't support iOS 10, we're 12+).

nabla-c0d3 commented 3 years ago

Yeah, agreed and thanks for the notice!

nabla-c0d3 commented 3 years ago

Released as v1.7.0.