3 ms·
> Many consumer VPNs install a client, and it would be trivial to ship a new trusted certificate with it. A lot of browsers have their own root chain, and also
by throw0101a 5y ago
> Many consumer VPNs install a client, and it would be trivial to ship a new trusted certificate with it.
A lot of browsers have their own root chain, and also now do certificate pinning, so will (IIRC) only accept specifically designated certs for particular sites (doesn't Google/Chrome/Gmail do this?).