[hrrsn]

If your root CA private key is compromised, there's a risk that a threat actor could generate certificates that your device will trust for any domain.

MITMProxy is a pretty well known and trusted open source project, but I wrote my own proxy to keep Apollo alive.