What is certificate pinning risk on clients?
PICTURE THIS: HOW TO EXPLAIN IT
Simple meaning
Pinning blocks MITM but breaks when certs rotate if pins are stale.
WHY — Security instead of guessing?
Why interviewers care about Security:
who only read docs from people who shipped.
and tied to .NET work.
Name the idea, why it exists, then one short example.
End with when you use it and one common pitfall.
STEPS — What happens step by step?
Before you speak the answer, walk the interviewer through these steps:
- 1Pinning blocks MITM but
breaks when certs rotate if pins are stale.
- 2Mobile apps need careful
update strategy.
- 3Many web apps rely
on public CA validation instead.
- 4Give an example
One tiny concrete case you can say aloud.
- 5Common mistake
What juniors usually get wrong.
- 6Close
When you pick this over the alternative.
EXAMPLE — See it in action
Here's a short line you can speak, broken into clear beats:
Note: Adapt this scaffold to your own project — keep it under 60–90 seconds.
Key takeaway
Pinning blocks MITM but breaks when certs rotate if pins are stale. Mobile apps need careful update strategy.