In defense of self-signed certificates (2013) michael.orlitzky.com 7 points by 1vuio0pswjnm7 10 hours ago
Replace pinning with DANE and this still holds up.