I like it! They should apply this to the problem of TOFU in HSTS. For many HTTPS sites it's trivial to hijack them by getting a user to switch to a different de

I like it! They should apply this to the problem of TOFU in HSTS. For many HTTPS sites it's trivial to hijack them by getting a user to switch to a different device, as the devices' apps often don't synchronize HSTS databases.