News for hackers. Stuff that matters.

A comment on Ask HN: Intercepting HTTPS – How can we trust anything?. Parent comment

Re:Ask HN: Intercepting HTTPS – How can we trust anything? by gchambert on Saturday December 25, 2021 @11:07AM (#29684346)
It's not 100% related but certificate pinning (HKPK) is only enforced for CA trusted by browser. It is ignored if the leaf certificate is signed by a user-imported CA (or deployed by enterprise policies). Maybe the same applies for SCT?
[ Parent | on HN ]

There are no comments on this comment yet.