1. 13
  1.  

  2. 1

    I think Chrome and Firefox still have the CAs for Google and Facebook pinned?

    1. 1

      IIRC, they do, but it’s hard-coded in the browser, and can’t be activated for other sites by HTTP headers or anything.