> So do you agree that a powerful enough owner of the device should be considered able to setup a server which poses as the regular server the app talks to, and

> So do you agree that a powerful enough owner of the device should be considered able to setup a server which poses as the regular server the app talks to, and sniff any request the app sends to its server? I think any attempt to prevent that is doomed to fail, similarly to how DRM has had absolutely no effect on the availability of pirated content.