On: The Security Impact of HTTPS Interception [pdf]

[voidlogic]

>Unfortunately, this is required in the enterprise world where corporate MiTM is often done

This still should not be the default, rather corps should have an easy about:config switch they can flip. The default should protect private users.

[ryan-c → voidlogic]

How is that a meaningfully different experience? Anything able to install a CA can flip the config value.