3 ms·95% of HTTPS servers vulnerable to trivial MITM attacks5 points by antouank 11y agojgalt212 11y agoYou still need to get in the middle.ucho 11y agoActing as "Evil twin" for hotspots in public places seems to be feasible. I understand why people aren't using cert pinning, that can completely break site, are there any practical reasons not to use HSTS?