Public key pinning for private networks

A method, comprising:

• requesting, with a client device, a first certificate from a trust service;
• validating, with the client device, that the first certificate from the trust service is signed by a preinstalled certificate stored on the client device;
• receiving, with the client device, a uniform resource locator identifying a network location of a secure sockets layer (SSL) pinning service, wherein the SSL pinning service is configured to provide a hash value for a first public key issued to a computing device;
• and
• receiving, with the client device, a second public key from the trust service, wherein the second public key is configured to encrypt network traffic sent to the SSL pinning service.

A non-transitory computer readable medium comprising machine readable instructions that, when executed by a processor of a first computing device, cause the first computing device to at least:

• request a first certificate from a trust service;
• validate that the first certificate from the trust service is signed by a preinstalled certificate on the first computing device;
• receive a uniform resource locator identifying a network location of a secure sockets layer (SSL) pinning service, wherein the SSL pinning service is configured to provide a hash value for a first public key issued to a second computing device;
• and
• receive a second public key from the trust service, wherein the second public key is configured to encrypt network traffic sent to the SSL pinning service.