Wire encrypts all communications end-to-end. This way, Wire protects its users from SSL inspection. In addition, we use certificate pinning so that the client always knows which certificate the Wire server has that the client needs to talk to and warns about non-private connections.
Wire implements certificate pinning on:
- Desktop
- iOS
By default, Wire implements certificate pinning for domains identified by the following regular expressions:
- app.wire.com
- prod-(assets|nginz-https|nginz-ssl).wire.com
- clientblacklist.wire.com
You may need to configure your software not to intercept traffic to the Wire server endpoints matching these regular expressions.