Disable pinning for specific subdomains? about trustkit HOT 5 CLOSED

That will work, but clearly it is not ideal from a syntactic or logical perspective. Perhaps the two keys should be optional if 'enforce' is false?

from trustkit.

Yeah, right now there is no clean way to do what you're trying to do. I am thinking about adding the option to not pin a domain (nor specify pins) but still get the reports.

from trustkit.

I am not sure in such case I would be interested in the reports. Anyway, if that helps, I might be able to create a PR that will enforce those keys if pinning is disabled.

from trustkit.

What prevents you from listing the domains you want to pin (instead of the other way around)?

from trustkit.

We have one endpoint in our domain that is served by Cloudflare, and all other domains (>20) are served from our servers. So it is easier (especially looking forward) to disable pinning for that domain, and not enabling it for all of the other domains.

from trustkit.