News for hackers. Stuff that matters.
Re:Further improving digital certificate security by dlgeek on Sunday December 08, 2013 @01:12PM (#6870543)
My understanding is that Chrome only cares about this sort of thing when it's a CA in the default trust store that shouldn't be impersonating them. User-added certs like in your example are fine, because explicit action was taken.

See Adam Langley's blog about this here: https://www.imperialviolet.org/2011/05/04/pinning.html

Re:Further improving digital certificate security by gwu78 on Sunday December 08, 2013 @01:26PM (#6870630)
"... user installed root CAs are given the authority to override pins."

This is the answer I was seeking. Thank you!