What I fear about HPKP is how easy it is to kill domain. You have to lose your keys once and it&#x27;s lost domain for your users, because it&#x27;s really hard for users to circumvent that protection. It&#x27;s better to have a really good understanding of what&#x27;s going on and have good key backups before you configure it.