Normally a browser accepts any valid certificate that leads to a trusted root, whichever of the many certificate authorities issued it. Certificate pinning narrows that down: a program accepts only a specific certificate or key for a particular server. That protects ... Continue Reading →