История изменений

Кстати, если вручную добавить рутовый CA, то pinning не работает

https://www.imperialviolet.org/2011/05/04/pinning.html

There are a number of cases where HTTPS connections are intercepted by using local, ephemeral certificates. These certificates are signed by a root certificate that has to be manually installed on the client. Corporate MITM proxies may do this, several anti-virus/parental control products do this and debugging tools like Fiddler can also do this. Since we cannot break in these situations, user installed root CAs are given the authority to override pins.

Кстати, если вручную добавить рутовый CA, то pinning не работает

https://www.imperialviolet.org/2011/05/04/pinning.html