Hacker News Reader

You can always choose to install your own root certificates, at which point your browsers will trust any certificates issued by them (which could be your own mitm proxy)

View on HN

It would cause issues for websites / apps using HSTS / Certificate pinning (a.k.a. most big websites)

No, HSTS doesn't pin the cert, it just says that TLS must be used. A custom root certificate will fulfill that requirement.

Cert pinning isn't used by browsers in general.

Reply on news.ycombinator.com