A vulnerability that allows a potential attacker to intercept encrypted communication between the Gmail app for iOS and the server via the man-in-the-middle (MitM) technique has been reported by security researchers.The flaw resides in the fact that the mobile app does not incorporate the legitimate certificate that validates the server receiving the communication, a feature called certificate pinning. Pinning basically consists in the certificate for the intended server being hard-coded into …
Comments are closed.
