Hard coded certificate authority
Brendan Vanous
started a topic on Wed, 18 March 2015 at 7:13 PM
Question from a developer:
Is it a good idea to hard-code the certificate authority for the SSL certificate from PlayFab?
Best Answer
Best Answer
Brendan Vanous said on Wed, 18 March 2015 at 7:13 PM
No, the authority (and note that some certificate providers have multiple authorities, and could use any of them when issuing a new certificate) may change if we update the certificate (as could everything else about the cert). The best thing to do is to trust the certificates in the client store, as browsers do.
1 Comment
Brendan Vanous said on Wed, 18 March 2015 at 7:13 PM
No, the authority (and note that some certificate providers have multiple authorities, and could use any of them when issuing a new certificate) may change if we update the certificate (as could everything else about the cert). The best thing to do is to trust the certificates in the client store, as browsers do.
