This is what HTTP Public Key Pinning (HPKP) protects against.<p>It allows a server to specify the only set of certificates that a browser should accept. Meaning that MITM&#x27;ing is impossible, without a valid cert in the chain of one of the advertised trusted certificates from the server.<p>Chrome, Firefox, Opera, Chrome for Android, and the Android stock browser all support it.<p>I&#x27;m not sure how they intend to circumvent this problem, apart from perhaps just instructing users to not use those browsers? That&#x27;s quite difficult to put into practice.