Comment by nickf

Comment by nickf 18 hours ago

0 replies

You can, but it’s still dangerous. You don’t have control over if those certs are revoked or keys blocklisted.

It’s best to simply not use public certs for pinning, if you really must do it.