<i>The bottom line is that you can no longer trust that green lock icon in your browser’s address bar. And that’s a scary, scary thing.</i><p>What&#x27;s even scarier? Not being able to inspect the traffic your own machine sends or receives because the powers that be have decided that, due to Superfish and all this other unwanted MITM&#x27;ing software, to &quot;improve security&quot;, certificate stores will be locked down so well that only the &quot;trusted authorities&quot; (i.e., they) can modify them.<p>As long as users (and by extension, the software they run) can modify the certificate store this &quot;problem&quot; will exist, but as this article shows, it&#x27;s not hard to add and remove certificates, and thus effectively &quot;choose who you trust&quot;. The alternative, to have no choice in who you trust, is far worse. I just hope that the security community realises this, but if things continue moving in the direction they currently are, I&#x27;m not so optimistic.<p>Incidentally, I also use a local MITM proxy, but to <i>remove</i> ads and other crap.