I am trying to understand certificate pinning.
Google started adding a whitelist of CA certs that they use for their certificates and if a cert for a google service is issued outside of this list they deny it. That is straightforward.
But say I have a web site https://www.example.com how do I use certificate pinning to improve the security of HTTPS connections to my server? On any browser and not just Chrome. What kind of messages are exactly sent from the server to the client? Does HTTPs support pinning?