In addition to published specifications and code, and reference architecture information, GENIVI presents a family of Technology technology and Securitysecurity-related Brief technology briefs and Whitepaperswhitepapers.
These documents have also been published also on the official GENIVI home page.
Certificate Pinning Technology Brief
- This one-pager gives an advanced reader an immediate understanding of the basics of Certificate Pinning, for avoidance of Man-in-the-middle attacks against SSL/TLS secured communications.
- GENIVI Certificate Pinning Tech Brief 20180216.pdf
Audience: Busy professionals, software engineers, as well as managers that need an a quick awareness boost about risks and mitigations around encrypted communication channels.
Audience: Security professionals, system architects and implementors implementers that need a deeper understanding of pitfalls and risks in implementing SSL/TLS, categories of attacks, and the type of mitigation that is effective against each.