Certificate Pinning

Certificate pinning is a technique where a client hard-codes the expected certificate or public key for a specific server, rejecting TLS connections that present a different certificate even if it is signed by a trusted CA. It prevents man-in-the-middle attacks via rogue or compromised certificate authorities.

Mobile apps commonly pin certificates to protect API communications against interception.