Breaking IP (e.g. MITM the server) means you get a TLS certificate anyway. This might be easier done than said[1]. Breaking IP might not even be necessary beca

Breaking IP (e.g. MITM the server) means you get a TLS certificate anyway. This might be easier done than said[1]. Breaking IP might not even be necessary because programmers are dumb[2]. [1]: https://www.bleepingcomputer.com/news/security/dns-poisoning-or-bgp-hijacking-suspected-behind-trezor-wallet-phishing-incident/ https://www.bleepingcomputer.com/news/security/dns-poisoning... [2]: http://web.archive.org/web/20120317165131/http://forum.developers.facebook.net/viewtopic.php?pid=258460 http://web.archive.org/web/20120317165131/http://forum.devel...