> and he wants you to add a new certificate authority... no explanation of how the 'cheating' works. I mean it should be pretty obvious why this is being done

> and he wants you to add a new certificate authority... no explanation of how the 'cheating' works. I mean it should be pretty obvious why this is being done for this general type of attack - if you have the necessary level of expertise where it is safe to use a tool like this.