You might have a point if Chrome hadn&#x27;t been the first browser to implement pinning, therefore defining the concept in web context to a large extent.<p>You may argue that this is is broken behaviour, but that&#x27;s what pinning currently is in browsers. Seems it&#x27;s this way in Firefox too (&quot;pinning not enforced if the trust anchor is a user inserted CA, default&quot; - <a href="https:&#x2F;&#x2F;wiki.mozilla.org&#x2F;SecurityEngineering&#x2F;Public_Key_Pinning" rel="nofollow">https:&#x2F;&#x2F;wiki.mozilla.org&#x2F;SecurityEngineering&#x2F;Public_Key_Pinn...</a>)