{"action":"created","issue":{"url":"https://api.github.com/repos/datatheorem/TrustKit/issues/88","repository_url":"https://api.github.com/repos/datatheorem/TrustKit","labels_url":"https://api.github.com/repos/datatheorem/TrustKit/issues/88/labels{/name}","comments_url":"https://api.github.com/repos/datatheorem/TrustKit/issues/88/comments","events_url":"https://api.github.com/repos/datatheorem/TrustKit/issues/88/events","html_url":"https://github.com/datatheorem/TrustKit/issues/88","id":203342248,"number":88,"title":"Disable pinning for specific subdomains?","user":{"login":"omerlh","id":6730584,"avatar_url":"https://avatars.githubusercontent.com/u/6730584?v=3","gravatar_id":"","url":"https://api.github.com/users/omerlh","html_url":"https://github.com/omerlh","followers_url":"https://api.github.com/users/omerlh/followers","following_url":"https://api.github.com/users/omerlh/following{/other_user}","gists_url":"https://api.github.com/users/omerlh/gists{/gist_id}","starred_url":"https://api.github.com/users/omerlh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/omerlh/subscriptions","organizations_url":"https://api.github.com/users/omerlh/orgs","repos_url":"https://api.github.com/users/omerlh/repos","events_url":"https://api.github.com/users/omerlh/events{/privacy}","received_events_url":"https://api.github.com/users/omerlh/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2017-01-26T10:52:49Z","updated_at":"2017-01-29T17:41:57Z","closed_at":null,"body":"Hey,\r\nI want to enable pinning for all our domain, but disable it for a specific subdomain. So I tried it with something like that:\r\n````swift\r\nlet trustConfig: [String : Any] = [\r\n            kTSKSwizzleNetworkDelegates:true,\r\n            kTSKPinnedDomains: [\r\n                \"mydomain.com\" :[\r\n                    kTSKEnforcePinning: true,\r\n                    kTSKPublicKeyAlgorithms: [kTSKAlgorithmRsa2048],\r\n                    kTSKPublicKeyHashes:\r\n                        [],\r\n                    kTSKIncludeSubdomains: true\r\n                ],\r\n                \"dontpin.mydomain.com\" :[\r\n                    kTSKEnforcePinning: false,\r\n                    kTSKPublicKeyAlgorithms: [kTSKAlgorithmRsa2048],\r\n                    kTSKPublicKeyHashes:\r\n                        []\r\n                ]\r\n\r\n            ]\r\n        ]\r\n\r\n````\r\nIs this the only way? I had to set `kTSKPublicKeyAlgorithms` and `kTSKPublicKeyHashes' although I want to disable pinning as they mandatory.\r\n\r\nThanks,\r\nOmer"},"comment":{"url":"https://api.github.com/repos/datatheorem/TrustKit/issues/comments/275931198","html_url":"https://github.com/datatheorem/TrustKit/issues/88#issuecomment-275931198","issue_url":"https://api.github.com/repos/datatheorem/TrustKit/issues/88","id":275931198,"user":{"login":"omerlh","id":6730584,"avatar_url":"https://avatars.githubusercontent.com/u/6730584?v=3","gravatar_id":"","url":"https://api.github.com/users/omerlh","html_url":"https://github.com/omerlh","followers_url":"https://api.github.com/users/omerlh/followers","following_url":"https://api.github.com/users/omerlh/following{/other_user}","gists_url":"https://api.github.com/users/omerlh/gists{/gist_id}","starred_url":"https://api.github.com/users/omerlh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/omerlh/subscriptions","organizations_url":"https://api.github.com/users/omerlh/orgs","repos_url":"https://api.github.com/users/omerlh/repos","events_url":"https://api.github.com/users/omerlh/events{/privacy}","received_events_url":"https://api.github.com/users/omerlh/received_events","type":"User","site_admin":false},"created_at":"2017-01-29T17:41:57Z","updated_at":"2017-01-29T17:41:57Z","body":"We have one endpoint in our domain that is served by Cloudflare, and all other domains (>20) are served from our servers. So it is easier (especially looking forward) to disable pinning for that domain, and not enabling it for all of the other domains."}}
{"actor":{"display_login":"omerlh"}}