Even with HPKP, many libs/apps behave like Firefox/Chrome in this respect:
"""
Firefox and Chrome disable pin validation for pinned hosts whose validated certificate chain terminates at a user-defined trust anchor (rather than a built-in trust anchor). This means that for users who imported custom root certificates all pinning violations are ignored.
I found xcodebuild broken after installing Xcode 4.3 and the CLT. If you find yourself in a similar situation, run `sudo xcode-select -switch /Applications/Xcode.app/Contents/Developer` to fix the newfound lack of a /Developer directory.
Hear hear. Unfortunately I /just/ paid for Spotify premium yesterday evening. While I have a grandfathered non-Facebook account, I've had no end of problems with their mobile client, and I think I'll be switching back to Rdio (which has a vastly superior [existent] web and mobile cilent, IMO.)
I wonder if this move is related to the problem I'm having using my login on the desktop client (error code 410, stuck in offline mode. Mobile app on the same wifi networks works fine.)
Not entirely so. I keep latency monitors running on Amazon.com and all of the sites I have hosted on EC2, and noticed a distinct spike in latency across the board corresponding with yesterday's offer.
Someone who creates web apps should be intimately familiar with the techniques used by people who break into web apps.
Dafydd Stuttard (book author) / PortSwigger created the Burp Suite web application security testing program, which I've found invaluable in performing security analysis of web apps during development.
I think I've ran into this limitation when using Google Reader on my iPhone 3GS running iOS 4.0.2. Images will eventually stop loading after viewing a series of image-heavy entries, but will load OK after a page refresh. Very annoying when you generally do heavy browsing on WiFi, where ~6.5 MB is no big deal. It's good to see a potential cause/fix that can be brought to their attention.
