← Security+ glossary

Certificate pinning

A technique by which an application binds in advance the expected certificate or public key of a server and rejects any connection with a different certificate. It hinders on-path attacks using fake certificates, but it requires careful management when replacing certificates.

All Security+ guides →