obra’s Twitter Archive—№ 19,908

"However, rather than keep the private key in a suitable HSM, MCS installed it in a man-in-the-middle proxy" googleonlinesecurity.blogspot.com/2015/03/maintaining-digital-certificate-security.html