缺少在IBM Mobile First Platform中绑定的证书7.1 [英] Lack of Certificate Pinning in IBM Mobile First Platform 7.1

问题描述

IBM Mobile First Platform 7.1不支持证书固定。

The IBM Mobile First Platform 7.1 is not Supporting Certificate Pinning.

我们使用IBM Blue-mix安全扫描测试了apt。

We tested the apt with IBM Blue-mix Security Scan.

缺少证书固定
Severity：
原因：此连接未实现/禁用证书锁定。
X-Force：None
OWASP：M3
Fix：为此连接启用证书锁定。

Lack of Certificate Pinning Severity: Causes: Certificate pinning is not implemented/disabled for this connection. X-Force: None OWASP: M3 Fix: Enable certificate pinning for this connection.

推荐答案

在MobileFirst Platform Foundation 7.1中，对证书锁定的支持如下：

In MobileFirst Platform Foundation 7.1 the support for certificate pinning is as follows:

1. 混合应用程序


2. 原生应用程式：支援


3. MobileFirst Cordova应用程式：不支援

详细了解证书固定：

• 博客帖子： https://mobilefirstplatform.ibmcloud.com/blog/2015/08 / 14 / certificate-pinning-in-ibm-mobilefirst-platform-foundation-7-1 /


• 文档： http://www.ibm.com/support/knowledgecenter/SSHSCD_7。 1.0 / com.ibm.worklight.dev.doc / monitor / c_cert_pinning_intro.html

• Blog post: https://mobilefirstplatform.ibmcloud.com/blog/2015/08/14/certificate-pinning-in-ibm-mobilefirst-platform-foundation-7-1/
• Documentation: http://www.ibm.com/support/knowledgecenter/SSHSCD_7.1.0/com.ibm.worklight.dev.doc/monitor/c_cert_pinning_intro.html

这篇关于缺少在IBM Mobile First Platform中绑定的证书7.1的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！