Have I fallen into a timewarp?
Even at $ORK, we have looked at certificate pinning. (Even if we're currently saying "not yet", because we'd need to have a spare keypair around and always updated, and our upstream CA doesn't have a second keypair itself – we'd be fairly happy enough pinning to "our certificates are always issued by academentia-CA")
Also, not surprisingly, browser support seems to be "FF and Chrome".
Biting the hand that feeds IT
