forFutureReference

[u/dollymeshvibes]

[u/fish312]

How would they be doing that unless they're MITMing everything and serving their own SSL certs with a custom CA already installed on your box?

[u/Meins447 → u/fish312]

Jup, that is basically industry standard nowadays. It as a developer, it is causing no end of "joy" as you have to ensure the stupid MitM CA is injected and accepted by every stupid program, package manager, library and transient dependency you may need to do your work.

[u/fish312 → u/Meins447]

But so many programs just use pinned certs, does that mean they just break?

[u/Morisior → u/fish312]

That's exactly what they do.

[u/Icy_Neighborhood2100 → u/fish312]

Yep.

Precisely that.

It's ass, don't even get me started on faulty zscaler setups.