While HPKP looks good, I really wouldn't implement it. Too dangerous for big sites in it's current form.
Ivan puts it better than me: https://blog.qualys.com/ssllabs/2016/09/06/is-http-public-ke...
Ivan puts it better than me: https://blog.qualys.com/ssllabs/2016/09/06/is-http-public-ke...
No comments yet.