Nokia: Yes, we decrypt your HTTPS data, but don’t worry about it
The Nokia Xpress Browser is not an HTTP web browser. It is a specialized client that talks to transcoding servers. It is designed for low-end phones in emerging markets. These phones have 128MB of RAM or less, they are not capable of running full web browsers. If a user has a phone capable of running a full browser (like the Lumia phones) and they choose to install the Nokia browser or Opera Mini to save on data usage, they are opting-in for the service. The compressing browser is not the default browser for Nokia phone running Windows Phone 7/8, MeeGo, Symbian^3, or S60. <a href="http://www.developer.nokia.com/Community/Wiki/User-Agent_headers_for_Nokia_devices" rel="nofollow">http://www.developer.nokia.com/Community/Wiki/User-Agent_hea...</a><p>There is no MITM attack. They are not spoofing DNS or forging SSL certs. They are providing a service that users are opting in to use.<p>If you don't trust Nokia, don't use their phones. Even with end-to-end encryption, the data (including voice calls) is unencrypted on your phone until the software and hardware encrypts it. The maker of the software and hardware always has the capability to add eavesdropping code if they want.