What would stop the MiTM from verifying Gmail&#x27;s cert? Say, the email is sent in plain text, it is intercepted by the bad guy, then the bad guy sends it on to gmail encrypted, with cert checking and everything.<p>I am failing to see what your proposal would help.