Isn't certificate pinning deprecated for regular web traffic?