Kazakhstan government is intercepting HTTPS traffic in its capital (again)
I keep trying to imagine a way that a website could inform a user "only these certificates are valid for me", but with a trusted MITM, it just doesn't seem like it's possible.<p>Whatever content or data the website included, the MITM can just alter it accordingly. Short of a browser knowing what Certificates are allowed for what websites (and the trusted MITM not modifying THAT content) there just isn't a simple way to know that your connection is being monitored or modified.<p>Short of quantum encryption, is there any simple way to detect such an attack once the user trusts the MITM's CA?