Working around phoney SSL certificates on iOS (...or not)
blog.duosecurity.com