Huh. Well that's superfish. Surely the norm among big name AV is to check CAs? Or am I being naive? > I think the author is arguing here that the MITM attack w

Huh. Well that's superfish. Surely the norm among big name AV is to check CAs? Or am I being naive? > I think the author is arguing here that the MITM attack wouldn't bother with encrypted traffic (which is obviously a very weak argument) That wouldn't be the case if it was all encrypted, so it's actually a counter-argument.