Certificate pinning support/Certificate change notification

[Whitey]

Hi there,

 

I'm a long time user, and generally a big fan of Enpass across my devices.

I recently updated the certificate on my Webdav instance and hit sync on my devices, and no notification was given on this change.

Given the nature of Enpass, I believe at minimum a notification should come up advising the certificate has changed and requesting a confirmation of trust. Some sort of certificate pinning solution would also work.

I use Let's Encrypt, so this would be inconvenient to me (given it updates every 3 months or so), however I feel the security/convenience trade off is fine.

Thanks