Sadly, they (Baidu) are not, which is why the script content was easily modified.<p>To clear it up, I said that GFW &quot;can&quot; do (but has not yet done) these. But it tried to MITM some https traffic earlier with a non-trusted certificate as an experiment.