Most of these attacks are blocked by the use of certificates (basic proxying) and certificate pinning. It has been tried before; if you for instance generate c

Most of these attacks are blocked by the use of certificates (basic proxying) and certificate pinning. It has been tried before; if you for instance generate certificates for the gmail domains Google will quickly find out because their applications refuse to connect to their sites using certificates that aren’t signed by the right authority. https://security.googleblog.com/2011/08/update-on-attempted-man-in-middle.html?m=1 https://security.googleblog.com/2011/08/update-on-attempted-... And with certificate transparency it becomes ever more obvious if try to pull tricks.