Home▸Cybersecurity▸Certificate Pinning & MITM Defense

Certificate Pinning & MITM Defense

Interactive 3D certificate-pinning simulator: watch a mobile app's TLS handshake with a server, toggle a man-in-the-middle attacker and SPKI pinning, and see exactly when the pin check blocks the attack — or when a careless certificate rotation locks real users out.

Cybersecurity3DModerate60 FPS

This simulator plays out the exact decision a mobile app makes on every HTTPS connection: does the server's presented public key match a hash the app already trusts? A packet travels a real 3D path from app to server on every attempt, an optional man-in-the-middle attacker can insert itself on that path with its own forged key, and SPKI-hash certificate pinning can be switched on or off to see it block — or fail to block — the interception. A certificate-rotation control demonstrates pinning's own failure mode: revoking trust in a key the app still expects, unless a backup pin was staged in advance.

⚙ Under the hood

Watch a mobile app's TLS handshake with its server in real 3D, toggle an SPKI-hash certificate pin and a man-in-the-middle attacker, and see exactly when pinning blocks the interception — or when an unstaged certificate rotation locks legitimate users out instead.

mobile securitycertificate pinningTLSMITMcybersecuritypenetration testing

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install