TLS certificate pinning (desktop) #201
Description
Android has TLS certificate pinning for relay connections with pin management UI. Desktop has nothing.
Android parity features needed:
- Pin relay TLS certificates on first connection (TOFU)
- Detect pin mismatches (potential MITM)
- View pinned certificates
- Clear individual pins
- Clear all pins
- Pin mismatch warning UI
Implementation notes:
- Settings UI: Add TLS certificate pinning management section to the Settings screen created in Add Desktop Settings #191
- Complements Tor proxy support for defense in depth