[trotsky]

Not really. The assumption here is that the attacker installed malware on the target computer to get their traffic redirected to the proxy. Once the computer is compromised there are any number of ways to nullify any signing benefits from ssl or dnssec.