Yeah, I think they do, actually. Two things... Proxies are a thing, and strippin...

tinix on Nov 2, 2019 | parent | context | favorite | on: Encrypted web traffic now exceeds 90%

Yeah, I think they do, actually.

Two things...

Proxies are a thing, and stripping the Expect-CT header is trivial.

Any CA can generate a valid SSL cert for any domain.