What do I need to know about certificate pinning?

Wire encrypts all communications end-to-end - this also means that users are protected from SSL inspection. In addition, we use certificate pinning so that the client always knows which certificate the Wire server has that the client needs to talk to and warns about non-private connections.

Wire implements certificate pinning on all platforms:

• Web
• Desktop
• iOS 
• Android

By default, Wire implements certificate pinning for domains identified by the following regular expressions:

• app.wire.com
• www.wire.com
• prod-(assets|nginz-https|nginz-ssl).wire.com
• [a-z0-9]{14,63}.cloudfront.net

You need to configure your software not to intercept traffic to the Wire server endpoints matching these regular expressions.