While being touted as one of the more robust ways to prevent Adversary in the Middle (AitM) attacks against TLS-protected resources, for some admins, the Enterprise Certificate Pinning feature in Windows may lock out their entire organization. However, Enterprise Certificate Pinning is not advised for domain names outside of your organization, when their certificates are … Continue reading "Enterprise Certificate Pinning might hurt your Hybrid Identity security efforts this January (MC1193408)"