Hacker News new | past | comments | ask | show | jobs | submit login

My understanding is pinning will not block this, locally installed trust anchors bypass pinning. https://groups.google.com/d/msg/mozilla.dev.security.policy/...



That's correct, HPKP does not block this. If some application uses manual pinning, it'll work (or, rather, won't work at all).




Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | Legal | Apply to YC | Contact

Search: