TLS Trust and Marketing Cloud Personalization

Marketing Cloud Personalization always employs SSL/TLS and rotates its certificates regularly. All Marketing Cloud Personalization certificates chain to Certificate Authorities (CAs) included on the Mozilla Server Authentication (SSL/TLS) Root Certificates list.

Marketing Cloud Personalization doesn't support TLS certificate pinning. TLS certificate pinning is a security technique where only a specific TLS certificate is trusted. Pinning is an outdated security practice that adds operational complexity and risks outages.

If you have an insurmountable need to pin a certificate, create a pinset that contains the entire Mozilla Server Authentication (SSL/TLS) Root Certificates list.