> short of patching the app Well, yeah, you need to go beyond a traffic sniffer because if a traffic sniffer was enough, where is the security gain? Apps usin

> short of patching the app Well, yeah, you need to go beyond a traffic sniffer because if a traffic sniffer was enough, where is the security gain? Apps using custom certificates is a best practice and absolutely essential for communicating securely with devices that can not participate in the web CA (because, duh, they are not websites). Think your local network WiFi camera.