Skip to main content
短.be

Certificate Pinning

A security technique where applications pre-fix trusted TLS certificates to detect and reject fraudulent certificate substitution by man-in-the-middle attackers.

Jan 13, 2026 · About 1 min read

Security

Certificate pinning associates a specific cryptographic certificate or public key with a host, rejecting connections that present different certificates even if they're signed by trusted certificate authorities. This prevents man-in-the-middle attacks using fraudulently issued certificates. Pinning can be implemented via HTTP Public Key Pinning (HPKP, now deprecated), application-level pinning in mobile apps, or custom TLS verification logic. URL shortening services should consider certificate pinning for their API clients and mobile SDKs to prevent traffic interception. However, pinning complicates certificate rotation and can cause outages if pins aren't updated before certificate changes. Services must balance the security benefit against operational risk, typically pinning to intermediate CA certificates rather than leaf certificates.

Share on XHatena

Was this article helpful?

Related Terms

Related Articles

Ready to create a short URL?

Shorten a URL for Free