8.6 CERTIFICATE MODIFICATION IN THE MIDDLE
EXERCISE 8.6 CERTIFICATE MODIFICATION IN THE MIDDLE
If you do manage to find when certificates are going over the wire, modify your HTTP proxy program to intercept and modify them. At the very least, you could just have a certificate of your own pre-loaded that you send instead. How does your browser feel about this?