omise / omise-swift

15 stars 10 forks source link

Remove Certificate Pinning #88

Closed pitiphong-p closed 5 years ago

pitiphong-p commented 5 years ago

Certificate Pinning plays a big role in security in the old day. It helps prevent the MITM attack. However the OSes nowadays already have some ways to help prevent this issue built in the OS and UX so we think it may not worth to have the Certificate Pinning forced built into the SDK.

From the reason above, we decided to remove the Certificate Pinning from the SDK and let the iOS does the work