TACK.IO

A proposal for a dynamically activated public key pinning framework that provides a layer of indirection away from Certificate Authorities, but is fully backwards compatible with existing CA certificates, and doesn't require sites to modify their existing certificate chains... Designed to be easy to incorporate into existing TLS servers and clients, with keys that are simple to manage.