File:OWASP defending-MITMA US 2012.pdf

Securing the SSL channel against man-in-the-middle attacks: Future technologies - HTTP Strict Transport Security and Pinning of Certs