Trust
Behaviour selector for domains that are not registered in the pinning configuration.
Use STRICT in production; use PERMISSIVE only for development or for gradual rollout.
Configuration availability (both modes)
The mode contract applies only to domains whose registration status can be determined from a validated pinning configuration. When no validated configuration is available, verification fails with TrustPinError.ErrorFetchingPinningInfo regardless of mode.
IP-literal hosts
IP address literals (IPv4 and IPv6) cannot be pinned — the pinning configuration registers DNS names only — so they are always classified as unregistered domains and follow the mode contract: PERMISSIVE allows the connection with platform trust only, STRICT rejects it with TrustPinError.DomainNotRegistered. Both address families behave identically, and the classification does not require a configuration fetch.
See also
Entries
Fail closed: verifying a certificate for an unregistered domain throws TrustPinError.DomainNotRegistered. Recommended for production.
Fail open for unregistered domains: registered domains are still pinned, but unregistered domains are allowed through. Intended for development, staging, and gradual rollout to STRICT.
Properties
Functions
Returns the enum constant of this type with the specified name. The string must match exactly an identifier used to declare an enum constant in this type. (Extraneous whitespace characters are not permitted.)
Returns an array containing the constants of this enum type, in the order they're declared.