{"guid":"aa53b942-2716-5a1c-9dfe-563570f742e2","title":"Certificate Pinning For The Rest Of Us","subtitle":null,"slug":"2019-184-certificate-pinning-for-the-rest-of-us","link":"https://talks.mrmcd.net/2019/talk/H8XDK8/","description":"A talk about the utterly broken chain of trust of SSL/TLS certificates and certificate pinning in the browser as a means to take back control.\n\nWeb browser developers have been betrayed by the SSL/TLS chain of trust more than once in the past. As a result they are now pinning their own certificates which means that they only trust a particular issuer. This talk gives an overview how the chain of trust works, of potential attack vectors, presents remedies that were tried and explains why they were largely unsuccessful. Finally a solution is presented how the rest of us can also regain control with a Firefox plugin that pins certificates of our choosing and warns when nasty things happen.","original_language":"eng","persons":["Heurekus"],"tags":["mrmcd19","184","2019"],"view_count":123,"promoted":false,"date":"2019-09-14T00:00:00.000+02:00","release_date":"2019-09-14T02:00:00.000+02:00","updated_at":"2024-03-20T14:30:09.169+01:00","length":1632,"duration":1632,"thumb_url":"https://static.media.ccc.de/media/conferences/mrmcd/mrmcd19/184-hd.jpg","poster_url":"https://static.media.ccc.de/media/conferences/mrmcd/mrmcd19/184-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/conferences/mrmcd/mrmcd19/184-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/conferences/mrmcd/mrmcd19/184-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/2019-184-certificate-pinning-for-the-rest-of-us","url":"https://api.media.ccc.de/public/events/aa53b942-2716-5a1c-9dfe-563570f742e2","conference_title":"MRMCD 2019 - Gesellschaftsspiele","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd19","related":[{"event_id":7820,"event_guid":"9a497fd7-62b4-5b5b-bf09-5dd123d18305","weight":8},{"event_id":7822,"event_guid":"9b1a393c-1dcd-53a0-85cd-523b4b078487","weight":11},{"event_id":7826,"event_guid":"955e622a-3b92-570b-8b83-e9ff351c7be1","weight":4},{"event_id":7828,"event_guid":"f31f31a9-edc5-5aa8-94e9-3bcbf87c7b4a","weight":4},{"event_id":7832,"event_guid":"1d40b357-5014-5e35-964e-8bba2ed866c1","weight":7},{"event_id":7833,"event_guid":"b9dd4bc6-6773-5dd4-b28e-8ea066f36d22","weight":10},{"event_id":7834,"event_guid":"d37118e7-992d-5e2a-92cb-890b437b96b6","weight":10},{"event_id":7836,"event_guid":"6a019d59-f68f-5d62-aa28-e95d5fb6e541","weight":10}],"recordings":[{"size":161,"length":1632,"mime_type":"video/mp4","language":"eng","filename":"mrmcd19-184-eng-Certificate_Pinning_For_The_Rest_Of_Us_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2019-09-14T20:12:28.415+02:00","recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd19/h264-hd/mrmcd19-184-eng-Certificate_Pinning_For_The_Rest_Of_Us_hd.mp4","url":"https://api.media.ccc.de/public/recordings/40086","event_url":"https://api.media.ccc.de/public/events/aa53b942-2716-5a1c-9dfe-563570f742e2","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd19"},{"size":16,"length":1632,"mime_type":"audio/opus","language":"eng","filename":"mrmcd19-184-eng-Certificate_Pinning_For_The_Rest_Of_Us_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2019-09-14T20:14:34.472+02:00","recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd19/opus/mrmcd19-184-eng-Certificate_Pinning_For_The_Rest_Of_Us_opus.opus","url":"https://api.media.ccc.de/public/recordings/40088","event_url":"https://api.media.ccc.de/public/events/aa53b942-2716-5a1c-9dfe-563570f742e2","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd19"},{"size":24,"length":1632,"mime_type":"audio/mpeg","language":"eng","filename":"mrmcd19-184-eng-Certificate_Pinning_For_The_Rest_Of_Us_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2019-09-14T20:14:53.805+02:00","recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd19/mp3/mrmcd19-184-eng-Certificate_Pinning_For_The_Rest_Of_Us_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/40089","event_url":"https://api.media.ccc.de/public/events/aa53b942-2716-5a1c-9dfe-563570f742e2","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd19"},{"size":60,"length":1632,"mime_type":"video/mp4","language":"eng","filename":"mrmcd19-184-eng-Certificate_Pinning_For_The_Rest_Of_Us_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2019-09-14T20:19:17.259+02:00","recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd19/h264-sd/mrmcd19-184-eng-Certificate_Pinning_For_The_Rest_Of_Us_sd.mp4","url":"https://api.media.ccc.de/public/recordings/40090","event_url":"https://api.media.ccc.de/public/events/aa53b942-2716-5a1c-9dfe-563570f742e2","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd19"},{"size":124,"length":1632,"mime_type":"video/webm","language":"eng","filename":"mrmcd19-184-eng-Certificate_Pinning_For_The_Rest_Of_Us_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2019-09-14T20:29:43.225+02:00","recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd19/webm-sd/mrmcd19-184-eng-Certificate_Pinning_For_The_Rest_Of_Us_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/40092","event_url":"https://api.media.ccc.de/public/events/aa53b942-2716-5a1c-9dfe-563570f742e2","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd19"},{"size":313,"length":1632,"mime_type":"video/webm","language":"eng","filename":"mrmcd19-184-eng-Certificate_Pinning_For_The_Rest_Of_Us_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2019-09-14T20:41:54.423+02:00","recording_url":"https://cdn.media.ccc.de/events/mrmcd/mrmcd19/webm-hd/mrmcd19-184-eng-Certificate_Pinning_For_The_Rest_Of_Us_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/40093","event_url":"https://api.media.ccc.de/public/events/aa53b942-2716-5a1c-9dfe-563570f742e2","conference_url":"https://api.media.ccc.de/public/conferences/mrmcd19"}]}