I&#x27;ve posted this idea elsewhere, but it seems relevant again. What about, as a compromise, adding a new ExtendedKeyUsage bit for &quot;TrafficInterception&quot; that must be set on the CA (probably would need to be on the root and all intermediates) in order for HPKP to be ignored by the browser?<p>At the very least, this clarifies intentions and helps somewhat with situations like the Dell certificate where it&#x27;s not intended for MitM.