[avar]

You can relatively easily MITM most applications by uploading a custom root certificate to your phone, and doing SSL termination + re-establishment on a router your phone is using.

[stefs]

isn't this only true if the app isn't pinning certificates?