D3-CP: Certificate Pinning

MITRE D3FEND countermeasure

What it does

Persisting either a server's X.509 certificate or their public key and comparing that to server's presented identity to allow for greater client confidence in the remote server's identity for SSL connections.

Attacks this counters

The chain in this corpus runs CVE → CWE → CAPEC → ATT&CK technique, which ends at what an adversary does. This is the hop after: what stops it.

• T1649

Source

• MITRE D3FEND D3-CP