Wire encrypts all communications end-to-end. This way, Wire protects you from SSL inspection. We also use certificate pinning so that the Wire client always knows which certificate the Wire server has that the client needs to communicate with, and warns the user in case of non-private connections.
Wire implements certificate pinning on:
- Desktop
- iOS
By default, Wire implements certificate pinning for domains identified by the following regular expressions:
- app.wire.com
- prod-(assets|nginz-https|nginz-ssl).wire.com
- clientblacklist.wire.com
You may need to configure your software not to intercept traffic to Wire server endpoints that match these regular expressions.