Good luck with that once hsts, cert pinning, and TLS 1.3 become more common.

jwilk · on July 4, 2018

MiTM proxying TLS 1.3 connections works just fine.

Browsers ignore cert pinning when the CA certificate was manually installed, so this is not a problem either.

I have no idea what HSTS is doing on your list.

Godel_unicode · on July 4, 2018

> I have no idea what HSTS is doing on your list.

jwilk · on July 4, 2018

We're talking about voluntarily installed proxy. Why would anyone want to mount an HTTPS stripping attack against themselves?