Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add certificate pinning #160

Open
o-fish-wildaid opened this issue Jul 28, 2020 · 2 comments · May be fixed by #459
Open

Add certificate pinning #160

o-fish-wildaid opened this issue Jul 28, 2020 · 2 comments · May be fixed by #459
Assignees
@Dmitriy-Holovnia
Labels
days: 2 Estimated to take 2 days to implement desirable: Production Would be nice to fix for first production release enhancement New feature or request hacktoberfest

Comments

@o-fish-wildaid
Copy link
Collaborator

Add certificate pinning to the app
@o-fish-wildaid o-fish-wildaid added the enhancement New feature or request label Jul 28, 2020
@Sheeri Sheeri added this to the Demo v23 8/18 milestone Aug 3, 2020
@Sheeri Sheeri modified the milestones: Demo v23 8/18, Demo v24 8/25 Aug 19, 2020
@am-MongoDB
Copy link
Collaborator

Before doing anything on the app side, should understand from the Realm team why the SDK is handling this for data access, but not for authentication. Moving to "Blocked"

@Sheeri Sheeri modified the milestones: Demo v24 8/25, Demo v25 9/1 Aug 27, 2020
@am-MongoDB
Copy link
Collaborator

According to the Realm team, the SDK no longer performs any certificate pinning – so not sure what made it appear to in the pen testing. Given that, we should go ahead and add certificate pinning for the realm.mongodb.com domain. This is what's been done for the Android app

@Sheeri Sheeri modified the milestones: Demo v25 9/1, Demo v26 9/8 Sep 1, 2020
@Sheeri Sheeri modified the milestones: Demo v26 9/8, Demo v27 9/15 Sep 8, 2020
@am-MongoDB am-MongoDB added days: 2 Estimated to take 2 days to implement desirable: Production Would be nice to fix for first production release labels Sep 14, 2020
@Sheeri Sheeri removed this from the v30 10/6 milestone Oct 1, 2020
@Dmitriy-Holovnia Dmitriy-Holovnia linked a pull request Jun 30, 2022 that will close this issue
Open
5 tasks
@Dmitriy-Holovnia Dmitriy-Holovnia linked a pull request Jun 30, 2022 that will close this issue
Add certificate pinning for realm.mongodb.com #459
Open
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@Dmitriy-Holovnia Dmitriy-Holovnia

Labels
days: 2 Estimated to take 2 days to implement desirable: Production Would be nice to fix for first production release enhancement New feature or request hacktoberfest
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add certificate pinning for realm.mongodb.com WildAid/o-fish-ios
4 participants
@Sheeri @am-MongoDB @Dmitriy-Holovnia @o-fish-wildaid