When I was working on WAN optimization I had a development prototype that did a man in the middle attack on SSL connections and resigned the connection with a l

When I was working on WAN optimization I had a development prototype that did a man in the middle attack on SSL connections and resigned the connection with a locally generated certificate (also added to the browser). My bank also had these logos, and despite me having a mitm attack going on, those logos stayed up. I failed to find a single scenario under which they went away!