[dujiulun2006]

Sadly, they (Baidu) are not, which is why the script content was easily modified.

To clear it up, I said that GFW "can" do (but has not yet done) these. But it tried to MITM some https traffic earlier with a non-trusted certificate as an experiment.

[dujiulun2006]

@andreyf: More like a social experiment. See whether people would notice (we did) and what's their reaction.

[andreyf]

Experiment? This isn't science. They can ask any engineer what MITM with a non-trusted cert would do, and that's nothing.