Comment by mintflow

This is a bit scary, this means they can even see the content of user's mail given the browser does not do any pin cert on the linux.