Something Good to Know when Adopting TrustKit Android

  • Do without TrustKit when Min SDK 24 and above
  • Single <domain-config> Single <domain>
<domain-config>
<domain includeSubdomains="true">google.com</domain>
<domain includeSubdomains="true">flurry.com</domain>
<domain includeSubdomains="true">yahoo.com</domain>
<pin-set>
<pin digest="SHA-256">k3XnEYQCK79AtL9GYnT/nyhsabas03V+bhRQYHQbpXU=</pin>
<pin digest="SHA-256">2kOi4HdYYsvTR1sTIR7RHwlf2SescTrpza9ZrWy7poQ=</pin>
</pin-set>
</domain-config>
<domain-config>
<domain includeSubdomains="true">google.com</domain>
<pin-set>
<pin digest="SHA-256">k3XnEYQCK79AtL9GYnT/nyhsabas03V+bhRQYHQbpXU=</pin>
<pin digest="SHA-256">2kOi4HdYYsvTR1sTIR7RHwlf2SescTrpza9ZrWy7poQ=</pin>
</pin-set>
</domain-config>
<domain-config>
<domain includeSubdomains="true">flurry.com</domain>
<pin-set>
<pin digest="SHA-256">k3XnEYQCK79AtL9GYnT/nyhsabas03V+bhRQYHQbpXU=</pin>
<pin digest="SHA-256">2kOi4HdYYsvTR1sTIR7RHwlf2SescTrpza9ZrWy7poQ=</pin>
</pin-set>
</domain-config>
<domain-config>
<domain includeSubdomains="true">yahoo.com</domain>
<pin-set>
<pin digest="SHA-256">k3XnEYQCK79AtL9GYnT/nyhsabas03V+bhRQYHQbpXU=</pin>
<pin digest="SHA-256">2kOi4HdYYsvTR1sTIR7RHwlf2SescTrpza9ZrWy7poQ=</pin>
</pin-set>
</domain-config>
  • Single OKHttpClient Single Domain
  • Expiration Date of Pinning Bypass
  • Using Charles to verify SSL Pinning

--

--

--

Lead Android & iOS Mobile Engineer at Yahoo (Verizon Media) Taiwan https://www.linkedin.com/in/hanruyeh/

Love podcasts or audiobooks? Learn on the go with our new app.

Recommended from Medium

Integrate the Sound Detection feature using Huawei ML Kit in Android (Kotlin)

Android dynamic bottom navigation

Phase II: Refactoring my Code

My Journey with Android Associate Developer

God Activity Architecture — One Architecture To Rule Them All

Email and password authentication using Firebase on Whats App clone

Improving Kotlin Quality

LW Summer Training 2021-

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Bram Yeh

Bram Yeh

Lead Android & iOS Mobile Engineer at Yahoo (Verizon Media) Taiwan https://www.linkedin.com/in/hanruyeh/

More from Medium

How I start developing in Android Compose

Kickstarting Ads Kit by integrating Interstitial Ads in Application (Kotlin)

Launch Modes in Android

Temperature Converter App: Android Kotlin App