4 ms·

My understanding is pinning will not block this, locally installed trust anchors bypass pinning. https://groups.google.com/d/msg/mozilla.dev.security.policy/wnu

• vbezhenar 7y ago
  That's correct, HPKP does not block this. If some application uses manual pinning, it'll work (or, rather, won't work at all).