Glossary: Change Records, Cryptography and PKI
certificate pinning
Also written: pinning
An app accepts only one known certificate or public key for its server, defending against a rogue CA but breaking if the server changes keys without an app update.