> Unless there’s an attack on cert providers or someone adds a cert to your device.
How does HSTS help with that?
How does HSTS help with that?
You mean HPKP? AFAIK it isn't an extension, but rather another feature. Also, it's deprecated at this point.