Cert pinning ignores root certs. This is by design :( >The Chromium browser disables pinning for certificate chains with private root certificates to enable va

Cert pinning ignores root certs. This is by design :( >The Chromium browser disables pinning for certificate chains with private root certificates to enable various corporate content inspection scanners and web debugging tools (such as mitmproxy or Fiddler). The RFC 7469 standard recommends disabling pinning violation reports for "user-defined" root certificates, where it is "acceptable" for the browser to disable pin validation.