ParentFull threadcsdrane·If you're using a browser without certificate pinning wouldn't a MITM attack suffice? E.g. sslstripView on HN