A less common question we get, that a lot of web devs are interested in is &#x27;How do I mitigate against MITM attacks&#x27;.<p>- As a browser, by using a default OS and watching the root CA store. You can control the key stores on most devices except iOS pretty easily: <a href="https:&#x2F;&#x2F;certsimple.com&#x2F;blog&#x2F;control-the-ssl-cas-your-browser-trusts" rel="nofollow">https:&#x2F;&#x2F;certsimple.com&#x2F;blog&#x2F;control-the-ssl-cas-your-browser...</a><p>- As a server, setting up key pinning (<a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;HTTP_Public_Key_Pinning" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;HTTP_Public_Key_Pinning</a>) which throws up a browser warning if someone accesses your site with a new key.