IMO cert pinning isn't all that important. The number of painful outages caused by cert pinning versus the actual security benefit isnt worth it IMO. But the t

IMO cert pinning isn't all that important. The number of painful outages caused by cert pinning versus the actual security benefit isnt worth it IMO. But the truth is that random app dev doesn't have their shit together enough to do pinning right. Don't believe me? AWS recommends the same https://aws.amazon.com/blogs/security/how-to-prepare-for-aws-move-to-its-own-certificate-authority/ https://aws.amazon.com/blogs/security/how-to-prepare-for-aws... If you're Chase, or PayPal, sure. But if you're random startup with a crappy app, don't bother IMO.