> But this is more a problem with the knee jerk HTTPS everywhere movement and a quick and dirty response than anything else not really HTTPS interception by AV

> But this is more a problem with the knee jerk HTTPS everywhere movement and a quick and dirty response than anything else not really HTTPS interception by AV programs and corporate proxies is common since the mid 90ies. What did happen because of the HTTPS everywhere movement is that this bad practice is finally coming to light and being scrutinised. What we need is for AV programs and proxies to actually do proper certificate validation and to not downgrade security on the public end of the tunnel. If they can't do that, then we might actually be better off with them not existing than with the status quo.