You just linked to 20 screenfuls of text that explain pinning in general, without a single mention of &quot;rogue&quot;.<p>The fact is that pinning as implemented in Chrome exempts installed CA&#x27;s from pinning checks because they want to allow administrator-mandated MITM - apparently &quot;market requirement&quot; because it&#x27;s a common practice in schools and workplaces in some countries that lack reasonable communications privacy legislation.