+ Start a Discussion

Salesforce iOS and Android SDK and SSL Certificate Pinning


We are looking to enhance security of our mobile applications that integrate with Salesforce iOS and Android SDKs. How do we implement certificate pinning so that man-in-the-middle attacks are prevented? The Salesforce SDK uses an internal HTTPS connection, which are not accessible for inserting the check for Salesforce Certificate.

Any help would be much appreciated.
Jose Ignacio SanzJose Ignacio Sanz
Do not know anything about this topic yet?

Thanks in advance.
César RuizCésar Ruiz
Hi, I have the same problem.

Any idea?

Akshay Chavan 102Akshay Chavan 102
I also have the same problem? Do you know the solution?

Christi Wakefield 5Christi Wakefield 5
Looks like there is a post regarding this in the idea exchange.  Would recommend upvoting:  https://trailblazer.salesforce.com/ideaView?id=0873A000000Lm4bQAC