Shadow AI & controls
Certificate pinning
Standards, techniques & other
An app checks the server's certificate or public key against a value built into the app, instead of trusting the operating system's certificate store. A TLS-inspecting proxy's certificate never matches, so the app drops the connection and the proxy sees nothing.