应用程序中如何检测SSL固定？

Question

我已经讲完了如何在Android上检测SSL固定

Answer 1

If you setup SSL interception with tools like mitmproxy or Burp and then import the proxy CA of this interception proxy into the android certificate store as trusted then you should be able to intercept the connection, ie get the plain text. If instead the application fails and maybe throws out some error about failing SSL verification than this application is probably doing SSL pinning.