P.S. does the transit authority offer an API or is this prone to breaking when they change their page layout?
[edit: I just read about the rumor on your webpage. Clarifies.]
As many other transit authorities, the STM [0] offers "GTFS" data (a standard feed format for transit info) [1].
Mucking around STM's public site, you'll also see the schedule information go by if you inspect the network requests. From what I've seen, their API endpoints are stable, reliable and fast. I've had to do ~2 updates in >1 year of service.
[0] http://stm.info/en [1] http://www.stm.info/en/about/developers
[ edit: that rumor is just a rumor :-) ]
For MITMProxy you can visit http://mimt.it when the setup is running.
A bit more difficult with “pinned-setificate” where you have to:
1) Decompile the app (easy if you search for the online APK-download and APK-decompile tools)
2) Move the certificate out of the APK and use it for the traffic between MITMProxy/Charles and the server
3) Replace the certificate in the APK with one generated for MITMProxy/Charles, or just delete it if that works for the app (most likely not)
4) Re-compile the APK and install on your device
5) Run MITMProxy/Charles as before, just with some parameters to load the “pinned-certificate”
(There is also a lot of guides for this. Maybe not for pinned-certificate.)
5 minutes