You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The implementation currently hard-codes three things that would be ideal to enable a way to provide alternate implementations based on differing needs to deviate from the default behavior in the library:
Hard-codes hashing of the public key (vs. entire certificate). Would be better to allow this to be configurable by inverting the dependencies and enabling injection of a different implementation (e.g. one that ). One reason for this would be if you wanted to achieve cross-platform parity in the definition of a PIN and how it's done. iOS doesn't make it easy in all cases to get the SubjectPublicKeyInfo, for example.
Hard-codes SHA1 hashing of the certificate information (SubjectPublicKeyInfo currently). Organizations will have varying standards for approved hashing algorithms so would be nice to make this configurable without having to fork and modify the code.
Requires comparing hashes of the certificate information. Would be nice if the certificate retrieval/hasher was a class that could be swapped out, e.g. if I wanted to avoid the hashing impact on every HTTPS request, I may want to compare raw bits rather than a hash (via a NullCertificateHasher implementation, for example). Then the comparison logic could compare what the class provides to the pins without caring what the bits are.
Wanted to see if there's interest in these changes as I may just make these tweaks if I get some spare time and provide them as I think they would be useful (if they're not already in the works).
The text was updated successfully, but these errors were encountered:
The implementation currently hard-codes three things that would be ideal to enable a way to provide alternate implementations based on differing needs to deviate from the default behavior in the library:
Wanted to see if there's interest in these changes as I may just make these tweaks if I get some spare time and provide them as I think they would be useful (if they're not already in the works).
The text was updated successfully, but these errors were encountered: