Kazakhstan government is intercepting HTTPS traffic in its capital (again)
I keep trying to imagine a way that a website could inform a user "only these certificates are valid for me", but with a trusted MITM, it just doesn't seem like it's possible.Whatever content or data the website included, the MITM can just alter it accordingly. Short of a browser knowing what Certificates are allowed for what websites (and the trusted MITM not modifying THAT content) there just isn't a simple way to know that your connection is being monitored or modified.Short of quantum encryption, is there any simple way to detect such an attack once the user trusts the MITM's CA?