Programs running on your PC can do it because they have access to your certificate store, and can tell the system to trust their certificate.<p>Entities not in control of your PC can&#x27;t MITM an HTTPS connection, barring a catastrophic bug. And it is catastrophic. If you have a way to do this, please tell everybody because it&#x27;s going to be the next Heartbleed.<p>The entire <i>point</i> of HTTPS is to prevent stuff like you&#x27;re describing. And it does work, for the most part. Bugs happen, but they get fixed as they&#x27;re discovered. It&#x27;s definitely not &quot;extremely easy.&quot;<p>Please go read up on this stuff before speaking authoritatively:<p><a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Transport_Layer_Security" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Transport_Layer_Security</a>