HTTP Public Key Pinning (HPKP)

[rugk]

If you do not want to pin your leaf certificate (which would be the most secure, but most risky option) you can also pin the intermediate certs of LE. Here is a detailed guide how you can do it:

HPKP best practices if you choose to implement

H…