So basically TACK is a side channel that verifies cert fingerprints right? The problem with PKI is that there's no collision detection. e.g. Under the same PKI

So basically TACK is a side channel that verifies cert fingerprints right? The problem with PKI is that there's no collision detection. e.g. Under the same PKI same CN should only have exactly one cert.