If you can MITM the connection, you can just do it server-side, which is far more insidious. This was done in the UK + Brazil a few years back -- some ISPs (inc

If you can MITM the connection, you can just do it server-side, which is far more insidious. This was done in the UK + Brazil a few years back -- some ISPs (including British Telecom) trialled it without even telling affected customers that they were being snooped on! https://www.telegraph.co.uk/technology/news/8438461/BT-and-Phorm-how-an-online-privacy-scandal-unfolded.html https://www.telegraph.co.uk/technology/news/8438461/BT-and-P... https://phonecallsuk.co.uk/bt-webwise.html https://phonecallsuk.co.uk/bt-webwise.html