Re: [fetch] Request for support for certificate pinning (#98)

@sleevi Your assumption that there is zero relationship with those sites is not true for all the examples I brought up so far. In the OpenID case the authentication endpoint is controlled by the same party that controls the OpenID configuration. In our distributed services case we are in a contractual relationship with our 3rd party service providers. We have a real threat model that you still failed to provide a solution for except "That's not how we do things here". I'm asking you to step back a bit and try to help me find a solution for this that is not a "footgun".

---
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/98#issuecomment-130770958