Reputation: 59
My company's product is Android and iOS mobile app which connects to our own backend. All interactions of the mobile app are with backend developed by our own company.
In such a situation, can the backend use a self signed certificate (instead of getting a certificate from CA) and pin this self-signed certificate on mobile app to make it more secure.
Please let me know if this strategy makes sense (or we still have to get SSL cert from a CA)
Upvotes: 1
Views: 873
Reputation: 3
I think you should contact the SSL support team for a signed certificate I believe they can give you a solution to update your SSL or need to update for a new certificate
Upvotes: 0
Reputation: 1
This is an old issue, but I think it bears following up on. SSL certs are dirt cheap if purchased from the right companies and not from the "big 3". Comodo has wildcard certs (any subdomain) for USD 60-70/year. They are secure (256 SHA) and install right off. Well worth the money, IMHO.
Upvotes: 0