Em 11-12-2015 09:28, Stefan Sperling escreveu: > I would consider signify keys printed on CDs and copied across several > web sites safer than trusting the hundreds of CA certs shipped with a > standard web browser.
Didn't we just established that with HPKP you can disregard the CA completely? At least if you trust your fist access to the site. But I think this thread followed its course, lets move on. Cheers, Giancarlo Razzolini