4 ms·

I've never seen that. Also, this would break many websites that are part of the HPKP preload list I would think (need to double check), which include most popul

I've never seen that. Also, this would break many websites that are part of the HPKP preload list I would think (need to double check), which include most popular websites. However, I've often seen port 443 being blocked :|.

pfg 10y ago
It's quite common in corporate networks. Locally installed CA certificates (i.e. anything that's not in the original root CA list) are exempt from HPKP rules for this particular reason.