3 ms·

or honestly @Any Browser Dev people

• y4mi 5y ago
  Resource pinning isn't gonna work unless the app isn't actively being developed. And if it isn't, pinning is redundant. Public key pinning would disregard the PKI RFCs, so not a good idea either. If people want to whitelist only some certs they already can by providing the browser only with the specific one's they want to trust.
  • Gargyle 5y ago
    That would be disingenious. Ever had a thing that wanted to encrypt text in a browser? Those things could finally make sense. Or that one offline wallet generator. It would be sweet if software become actually finished.