Hacker News new | ask | show | jobs
by nickf 202 days ago
You can, but it’s still dangerous. You don’t have control over if those certs are revoked or keys blocklisted.

It’s best to simply not use public certs for pinning, if you really must do it.