Making Chrome more secure by bringing Key Pinning to Android

Chrome Security details that starting in Chrome 106, Android now enforces key pinning to match desktop, helping uphold the “Rule of Two” by ensuring the high-privilege browser process only treats communications with pinned Google servers as trustworthy. To reduce false positives and keep protections current without full browser updates, the pin set (along with CT log list and Chrome Root Store) is distributed and timestamped via the component updater, making the change invisible to users while strengthening defenses against CA compromise.