datatheorem / TrustKit

Easy SSL pinning validation and reporting for iOS, macOS, tvOS and watchOS.
MIT License
2.01k stars 362 forks source link

Is this vulnerable to ssl-kill-switch2 on iOS? #246

Closed hanifmhd closed 3 years ago

hanifmhd commented 3 years ago

Hi,

I want to ask, can it prevent bypass using ssl kill switch?

Thank you.

nabla-c0d3 commented 3 years ago

Hello, SSL Kill Switch relies on the device being compromised/jailbroken. On a jailbroken device, it is always possible to bypass Truskit and any pinning library in general.