ParentFull threadsandij·When pinning CAs instead of certificates, you’d use CAA instead of HPKP.View on HN