Re: [fetch] Request for support for certificate pinning (#98)

Given that a request should not be sent at all if it does not match the expected certs I now think that the whole flagging idea is pointless. So the four modes should be:
- Off
- Global list
- Per request list
- Merge of both lists
All but "Off" would fail the request if the server cert is not matched against a fingerprint.

---
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/98#issuecomment-130063996