3 ms·

If you have a computer between the user and net, then yes all bets are off because you can generate certs the browser will trust.

• Animats 12y ago
  Only if the root cert store of the user's machine has been tampered with. If you have a valid cert store, you can detect MITM attacks on HTTPS connections.
  • halayli 12y ago
    yep. I was referring to superfish's case.