Disable SSL pinning temporarily

[DmitryBespalov]

SSL certificates are about to change several times for our safe.global website, so DevOps (Raul) asked to temporarily switch off the SSL pinning for new service URLs after migration.

Please disable / do not configure SSL pinning for the new safe.global domains.

We'll need to enable it when the certificates are configured for sure.

[biafra23]

Can't we pin on something higher up the certificate chain? So any cert is accepted that is signed by the organization? That way we do not have to renew the the pinning every time a new certificate is used.

As an alternative: For the production environment: Could we have at least 2 certificates with different expiration dates?

[liliya-soroka]

Verified