Wondering about a turtles-all-the-way solution:<p>A web-socket based protocol that opens up a new SSL session with non-MITM&#x27;d certificates.<p>So you&#x27;d open up the snoop-me HTTPS&#x2F;1.1 connection, do some GETs, then say &quot;GET &#x2F;busy, yo&quot;, and start what looks like a video-chat conversation that is in fact a regular SSL connection with uncompromised certs.<p>(some protocol) over SSL over Web-Socket over bad-SSL over TCP&#x2F;IP