Certificate pinning (also called public key pinning) is when an application hard-codes the expected certificate or public key hash and refuses connections if the certificate doesn’t match — even if it’s from a trusted CA. This protects against rogue CA issuance. HPKP (HTTP header-based pinning) was deprecated; modern apps use pinning in native code.
All questions