Is HTTP Public Key Pinning Dead?
DANE certificate pinning seems to like it solves most issues HPKP does, without the imminent danger.<p>It won&#x27;t stop a dedicated attacker from MITMing a connection if they can block DNSSEC. However, if someone uses false BGP route to hijack your IP, they can&#x27;t reach your DNS queries.<p>You&#x27;d still be fucked if you connect to a local wifi connection though.