CapacitorHttp integration
Native pinning is applied automatically to CapacitorHttp requests once CapacitorHttp.enabled and SSLPinning.certs are configured.
@capgo/capacitor-ssl-pinning
Protect CapacitorHttp requests with native certificate pinning on iOS and Android.
Bundled certificate workflow
Declare certificate files in capacitor.config.* and the plugin copies them into webDir/certs during bunx cap sync.
Selective bypass rules
Use excludedDomains for hosts like analytics or third-party SDK endpoints that should not be pinned.
Cross-platform native enforcement
Android uses a pinned SSLSocketFactory, while iOS installs a pinned URLSession delegate for Capacitor networking.
Inspection helpers
Verify what native configuration is active with getConfiguration() and getPluginVersion().
Comprehensive setup guide
Start with the Getting Started guide to configure certificates and ship safely.