> You're saying MITM the user's HTTP connection? I can't imagine how that would work with SSL? The browser wouldn't think it's talking to bankofamerica.com. Th

> You're saying MITM the user's HTTP connection? I can't imagine how that would work with SSL? The browser wouldn't think it's talking to bankofamerica.com. The browser would think it's talking to your sandstorm server. The user is willingly letting the grain MITM the connection so that the app can get their data out. There would certainly be complications, though.