Re:Public Key Pinning Being Removed from Chrome
by saas_co_de on Friday October 27, 2017 @07:53PM
(#15573185)
I agree. I wouldn't see this as being for average anonymous users using some mass market service.
It would only be useful in cases where people are willing to pay a price (in convenience) for security, understand the tech well enough to use it, and have some relationship with the domain owner that allows out-of-band verification of cert changes.
It would only be useful in cases where people are willing to pay a price (in convenience) for security, understand the tech well enough to use it, and have some relationship with the domain owner that allows out-of-band verification of cert changes.