[charcircuit]

>That sucks

It's insecure. If you are a bank app you doesn't want other people to be able to steal the users password by installing a new certificate.

[mardifoufs]

How often does this happen on phones? Why do banks still allow desktop usage then?

[charcircuit]

It doesn't matter how often it happens. It's a vulnerability that people will end up being exploited or the data will end up being stolen by another hacker.

Not all banks allow desktop usage. Some banks restrict certain functionality from the web interface since it is less secure.

[feanaro]

It absolutely matters how often it happens. Otherwise we should start imprisoning everyone in the hopes of getting that one serial killer by the same principle. Some cures are worse than the disease.

[zb3]

This is not the same scenario as the user installing a new certificate themselves.

[charcircuit]

Someone's company can install a certificate onto employee's work phones.

[Brian_K_White]

Tough shit. If you are a lot of things you want or don't want a lot of things. It doesn't mean they have a right to the thing they want or don't want.