Verified65% confidenceFactExact time
Certificate pinning hardcodes the expected server certificate fingerprint in the code, refusing the connection as soon as a certificate mismatch is detected
3
Sources
65%
Confidence
Long-term
Relevance
7/13/2026
First Seen
Sources
Grok CLI数据传输深度分析：xAI命令行工具发送了什么
hackernewshackernews7/12/2026
Related Claims
Unverified证书固定分为硬编码完整证书和仅固定公钥哈希（HPKP）两种形式，后者允许在不重新发布客户端的情况下轮换证书73% similarUnverifiedCapturing traffic from clients that use Certificate Pinning is relatively difficult, but most desktop development tools do not enable this mechanism.71% similarUnverifiedOnce a session token is hijacked, even if the account has 2FA enabled via SMS verification codes or hardware keys, it becomes useless, because authentication was already completed at the time the token was generated.68% similarUnverifiedThe C2PA signature is bound to the file's byte stream, and any decode-then-re-encode operation invalidates the signature, so C2PA's strength lies in "intact delivery" scenarios.65% similarUnverified证书锁定分为两类实现：证书锁定（固定整张证书）和公钥锁定（固定证书中的公钥）63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/502686API
curl https://kongchang.com/api/v1/knowledge/claims/502686MCP
get_claim(id=502686)