logoalt Hacker News

nickfyesterday at 7:47 PM0 repliesview on HN

You can, but it’s still dangerous. You don’t have control over if those certs are revoked or keys blocklisted.

It’s best to simply not use public certs for pinning, if you really must do it.