demo · v144

Pinning Workbench

The IWA use case: a kiosk app talks to a known backend and refuses to ship the user’s next interaction unless the fingerprint matches an expected pin. Paste your pin set, simulate an incoming certificate’s fingerprint, and the workbench shows how the v144 SecurityInfo handler would resolve.

Controlled Frame is Isolated-Web-App only. Outside IWA the constructor throws — this page simulates the matching logic so you can build your pin policy without a kiosk handy.

ControlledFrame: checking…

your pinned fingerprints (SHA-256)

simulated incoming request

verdict

—

match details

the API

frame.request.onSecurityInfo.addListener((info, details) => {
  // info.certificates[0].fingerprint  (SHA-256)
  // info.certificates[0].subject, issuer, valid_from, valid_to
  // info.protocol            "TLS 1.3"
  // info.cipher_suite        "TLS_AES_128_GCM_SHA256"
  if (!pinnedFingerprints.has(info.certificates[0].fingerprint)) {
    return { cancel: true };
  }
});

see also