Comment by rohanpai

If you can man in the middle traffic, aren't all authentication cookies compromised anyway?

Wouldn't any service then be subject to "interception"?