Mobile App with Cert Pinning - SSL Cert on DMZ box with trusted CA vs my own CA
<p>I am developing a mobile app with certificate pinning.  I will have a box in the DMZ that will proxy my requests.  Should this server have a cert from a trusted CA or can I use the one I generated from my own CA?</p>

<p>What would be the benefits of using a trusted CA from a mobile client?</p>

<p>Also, I will hit several different servers afterward that will be using my own CA generated cert.  Should I pin those as well?  I am assuming yes, that pinning both will be best even within the network.  But is the necessary?</p>

<p>Thanks!</p>