This question already has an answer here:
Using the Public Key Pinning header the user will only trust in my SSL Certificate, supposedly.
If I use only the HPKP and the certificate is safe, the attacker not got it, still possible the attacker do a MITM or something like that?
In my mind, probably wrong, the attacker still able to redirect the user to another location, but he not have the cert, so the HPKP will block it. This will prevent the user to consume the content from the fake server.
Have a reason to use HPKP + DNSSEC?