← Back to context

Comment by SergeAx

3 years ago

And this is why, kids, you need to enforce certificate pinning on your critical infrastructure!

Public key pinning has been mostly abandoned on popular websites due to high risk of prolonged outages should someone make a mistake and mistakes do happen.

There are browser addons that replicate this behavior however and some Jabber clients/servers apparently have their own mechanism for this [1] but one can only hope everyone is using the combination of servers and clients that support this feature.

[1] - https://news.ycombinator.com/item?id=37956911