Static Pinning | Approov

HTTPS (Good)

⚠️ Limited – relies on CA trust

⚠️ Vulnerable to redirection

❌ No – trusts any valid CA cert

⚠️ Manual cert updates needed

❌ Not applicable

❌ No

❌ No

⚠️ Medium – manual cert checks

⚠️ At risk during cert changes

Static Pinning (Better)

✅ Yes – blocks untrusted connections

✅ Yes – cert validation prevents redirection

✅ Yes – pins trusted certs in app

⚠️ App update required

⚠️ Pins can be found in code

⚠️ Not built-in

⚠️ Slow – requires app store review

⚠️ High – manual pin management

⚠️ At risk during cert changes

Dynamic Pinning (Best)

✅➕ Yes – with real-time app integrity checks

✅➕ Yes – adds runtime attestation

✅➕ Yes – pins securely delivered and updated live

✅➕ Seamless OTA updates, no release delays

✅➕ Pins never stored in app

✅➕ Full control via dashboard or CLI

✅➕ Instantly deployable to users

✅➕ Low – automatic pin updates

✅➕ Failover pins maintain uptime