Hacker News Reader

It's not. Certs are designed to protect the average user from MitM, not to protect corporations from it.

They do protect corporations, because they can just let there certificate be actually validated of band.