Giters

EddyVerbruggen / SSLCertificateChecker-PhoneGap-Plugin

:passport_control: Prevent Man in the Middle attacks with this Cordova plugin

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

successCallback even when MITM

Sroose opened this issue · comments

commented

I've installed this plugin but when testing it, it always goes to the successCallback. I'm deliberately intercepting the calls using a proxy on the phone to a PC with Fiddler. I'm even adding a timestamp to the URL so make sure it's unique and not cached somehow.

When I check the fingerprint, it gives the Fiddler certificate's one, which does not equal my expected fingerprints.

I'm using Cordova CLI 6.5.0, this plugin version 5.1.0, (Ionic) app on IOS 10

Maybe its related to Issue #43?