Support HPKP

[rugk]

HPKP improves the security of HTTPS connections in a great extend! It would be nice if aiohttp would support it out of the box.

https://scotthelme.co.uk/hpkp-http-public-key-pinning/
https://developer.mozilla.org/de/docs/Web/Security/Public_Key_Pinning
https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning
https://www.owasp.org/index.php/Certificate_and_Public_Key_Pinning
https://timtaubert.de/blog/2014/10/http-public-key-pinning-explained/
https://tools.ietf.org/html/draft-ietf-websec-key-pinning-21

[asvetlov]

Agree, it would be nice.
Unfortunately the issue has low priority for me but if you, @rugk want to make a Pull Request -- please go ahead!

[rugk]

I am not really experienced in Python. Maybe /cc @lgrahl

[lgrahl]

I'll have a look at it as soon as I can find some time.

[asvetlov]

Great!

[lgrahl]

Just wanted to let you know that it will take quite some time before I can potentially pick this up. So, if anyone else wants to implement it, please go for it.

[asvetlov]

Close as not active for very long time.

[rugk]

Are you kidding, no… this is still a feature that is missing. Nobody was active to implement it.

[asvetlov]

If nobody wants to implement it -- it will be missed forever.
The bug tracker is not a wishlist for never implemented dreams.
If you still want it -- please come up with a pull request.

[rugk]

@lgrahl You talked about time… I am here from the future… 😜