Not really, heck, on Android and iOS around 40% of banking apps don't even check the certificate at all.
Most people, even most developers seem to be pretty clueless with this stuff.
Most people, even most developers seem to be pretty clueless with this stuff.
> Altogether, of the 639,283 [Android] apps in our data-set, 45 implement pinning.
[1]: https://www.usenix.org/conference/usenixsecurity15/technical...
Please name and shame, this sounds pretty surprising!
There are several banking-related apps listed here.
Highly recommend any material on the main site as well. One of the few legit infosec professors I have ever interacted with.