I am surprised the Nest devices allow themselves to be man-in-middle&#x27;ed like this. Why are Nest devices accepting a random (valid) certificate? One would think they will only accept a valid Google certificate, signed by the Google root certificate.<p>Am I missing something? The article does not mention about any software tampering on the device itself.