Problem
No certificate pinning implemented, vulnerable to man-in-the-middle attacks.
Solution
- Add
http_certificate_pinning package
- Pin certificates for Jikan API and Consumet API
- Configure pinning in HTTP client
- Add cert update mechanism
- Test on different networks
- Document cert rotation process
Estimated Effort
3 hours
Priority
Low - Security hardening for sensitive deployments
Note
Only implement if app handles sensitive user data or payment info
Labels
priority:low, type:security, effort:medium
Problem
No certificate pinning implemented, vulnerable to man-in-the-middle attacks.
Solution
http_certificate_pinningpackageEstimated Effort
3 hours
Priority
Low - Security hardening for sensitive deployments
Note
Only implement if app handles sensitive user data or payment info
Labels
priority:low, type:security, effort:medium