{"action":"opened","issue":{"url":"https://api.github.com/repos/mozilla-services/syncto/issues/72","labels_url":"https://api.github.com/repos/mozilla-services/syncto/issues/72/labels{/name}","comments_url":"https://api.github.com/repos/mozilla-services/syncto/issues/72/comments","events_url":"https://api.github.com/repos/mozilla-services/syncto/issues/72/events","html_url":"https://github.com/mozilla-services/syncto/issues/72","id":117160167,"number":72,"title":"Add certificate pinning for DigiCert root certificate.","user":{"login":"Natim","id":229453,"avatar_url":"https://avatars.githubusercontent.com/u/229453?v=3","gravatar_id":"","url":"https://api.github.com/users/Natim","html_url":"https://github.com/Natim","followers_url":"https://api.github.com/users/Natim/followers","following_url":"https://api.github.com/users/Natim/following{/other_user}","gists_url":"https://api.github.com/users/Natim/gists{/gist_id}","starred_url":"https://api.github.com/users/Natim/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Natim/subscriptions","organizations_url":"https://api.github.com/users/Natim/orgs","repos_url":"https://api.github.com/users/Natim/repos","events_url":"https://api.github.com/users/Natim/events{/privacy}","received_events_url":"https://api.github.com/users/Natim/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/mozilla-services/syncto/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-11-16T16:14:51Z","updated_at":"2015-11-16T16:14:51Z","closed_at":null,"body":"In order to make sure we are talking to the right Firefox Sync infrastructure, we need to let people eventually pin the certificate they are waiting for when talking to the Firefox Sync services (token server and sync nodes)\r\n\r\nTo ease the maintenance of such a thing, we will pin the DigiCert Root certificate in production.\r\n\r\nThis certificate can be found here: https://global-root.digicert.com/info/index.html"}}