From what I can see this uses the same public&#x2F;private key for everyone using the service. So it would be easy to MITM any HTTPS connection using this if you&#x27;re a network admin or hostile WiFi etc.<p>I don&#x27;t think this is a problem for the intended audience - developers and test sites.<p>But there should perhaps be a clear warning somewhere about not using this in production.<p>EDIT: Turns out this is actually mentioned on the FAQ page of <a href="https:&#x2F;&#x2F;sslip.io&#x2F;" rel="nofollow">https:&#x2F;&#x2F;sslip.io&#x2F;</a>