Unverified50% confidenceSolutionExact time
Certificate pinning can defend against man-in-the-middle attacks: even if an attacker holds a valid certificate issued by a trusted CA, the connection is still rejected as long as the public key hash does not match the pinned value.
1
Sources
50%
Confidence
Long-term
Relevance
10/8/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSSL Pinning机制在客户端代码中硬编码服务器证书的公钥指纹或证书哈希，拒绝接受非预期CA签发的证书，即便该CA已被系统信任库收录76% similarUnverified多因素身份验证（MFA）在认证层面增加第二道防线，即便凭证泄露，攻击者也无法仅凭账号密码完成身份验证74% similarUnverifiedWithout certificate trust configured, even an attacker who controls an intermediate network device cannot decrypt communications between Copilot and the server.74% similarUnverifiedThe security of the CA trust system depends on its weakest CA — if any CA is compromised or has validation flaws, it may result in legitimate certificates being issued for domains not owned by the requester.74% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/987553API
curl https://kongchang.com/api/v1/knowledge/claims/987553MCP
get_claim(id=987553)