Certificate pinning is absolutely targeted at stopping the use of rogue root CA&#x27;s installed in devices.  OWASP does a pretty good job of covering the topic.<p><a href="https:&#x2F;&#x2F;www.owasp.org&#x2F;index.php&#x2F;Certificate_and_Public_Key_Pinning" rel="nofollow">https:&#x2F;&#x2F;www.owasp.org&#x2F;index.php&#x2F;Certificate_and_Public_Key_P...</a>