AFSSLPinningModePublicKey will usually be preferable to AFSSLPinningModeCertificate because it gets around the problem of certificate expiration. With a choice, users have to know the tradeoffs. Would it make things simpler if AFNetworking didn't offer a choice?