With the rise of mobile banking apps, users can now enjoy banking services from the comfort of their Android devices. However, the prevalence of Man-In-The-Middle (MITM) attacks pose a serious security threat to mobile banking users. For example, cyber thugs can steal their banking details in between their servers and browsers. Such attacks can lead to the loss of their money since hackers can access their passwords and empty their bank accounts. Therefore, it becomes necessary for mobile app developers and the banking systems that use them to take precautionary measures to safeguard their customers. One way of doing that is using SSL certificates.
However, the rise of fraudulent CAs issuing compromised SSL certificates raises the bar for security, and hence, necessitating SSL certificate pinning. In the remaining sections of this post, I will reveal more details about this solution to mobile banking security. I will disclose what it is, how to implement it, and its pros and limitations. So, remain on board so you don’t miss anything.