[bckygldstn]

For sure HPKP has plenty of issues, but with HSTS you just need to commit to using HTTPS for the next X days. That seems pretty doable, especially with free automated certificates or CAs with enterprise support.