Cert pinning is not enforced on Desktop #24451
Labels
certpinning
OS/Desktop
priority/P2
A bad problem. We might uplift this to the next planned release.
QA Pass-macOS
QA Pass-Win64
QA/Test-Plan-Specified
QA/Yes
regression
release-notes/include
security
Milestone
Upstream recently changed how pinning is gated and when we merged that change, we added a fixed timestamp of Wed 13 Apr 2022 05:00:00 PM PDT. That stopped working a few weeks later because at that point the list is considered stale after 10 weeks.
Test URL (in Brave's pinning list): https://ssl-pinning.someblog.org/
The text was updated successfully, but these errors were encountered: