In the short term, the basic technique that has been proposed to deal with this problem is known
as certificate pinning, and relies on associating hosts with their expected X.509 certificates or
public keys. Pinning is a way for clients to obtain a greater level of assurance in server public
keys. By pinning a trusted known certificate (or public key), clients can detect any change
either in the certifi cate or in the public key submitted by any server as part of any future TLS
handshake.