SSL 固定在 android 应用程序中是否会影响使用同一服务器的 iOS 应用程序的工作？

Question

I am implementing SSL public key pinning on my android app. After implementation on the android app and adding Expect-CT header at the server will it affect my iOS app on which SSL pinning is not implemented?

Answer 1

SSL pinning is an implementation detail of the app, so implementing on Android won't impact iOS.

The Expect-CT header, however, is actually for Certificate Transparency, and so un-related to SSL pinning. It will have no impact on either Android or iOS apps currently although could potentially in webviews where the browsers are starting to add in support.

To support CT on Android, look at certificate-transparency-android . For iOS, AppTransportSecurity has a NSRequiresCertificateTransparency that needs to be set to YES , the default is NO , ie by default CT is not enabled within iOS apps.