3 ms·

No, HTTPS only. So probably only Google or the NSA, I guess.

• psionski 13y ago
  Well, it's not like you can't buy a valid certificate for google.com from a turkish CA that is trusted by all browsers... This has happened before, the only question is how much you're willing to pay.
  • Aissen 13y ago
    There's also hardcoded HSTS pining for Google certificates, preventing this.
    • est 13y ago
      How does HSTS deal with expired certs?