browsers generally don't pin certs. there are methods to do it but everyone is scared to do it as it's a pretty quick way to DoS your entire user-base if you ge

browsers generally don't pin certs. there are methods to do it but everyone is scared to do it as it's a pretty quick way to DoS your entire user-base if you get it wrong. The intended design of PKI suggests that pinning should not be a thing. unfortunately PKI is broken and pinning is a 'patch' because it's too each to obtain a cert for a property you don't own (hi bluecoat)