[larsonnn]

Interesting read. Just to add, even HTTPS isn't completely safe from Man-in-the-Middle attacks, especially in corporate environments. A few points to consider:

- Some apps bypass or poorly implement certificate pinning.

- Companies using self-signed certs can be spoofed.

- There's always the risk of compromised Certificate Authorities.

- Corporate tools that inspect HTTPS traffic, while useful for security, can inadvertently become a vulnerability if misconfigured or hacked.

Always good to remember: HTTPS is a protective layer, but not an unbreakable barrier.