&gt; whose certificate authority it does not recognize as bona fide<p>That&#x27;s a very strange criteria; do you mean that anything that <i>would</i> have been a certificate error gets MITMed instead, rather than rejected?  Very strange.