[tremon]

Every escape hatch in the certificate validation is also an additional avenue for attack. For example, using a DNS record to override certificate pins makes DNS cache poisoning much more valuable to the attacker.

[forgotmypw17]

Every layer of security is also an additional accessibility hurdle.

[metadat]

Got it, thanks @tremon.