> "can not be used to implement a MITM" Anything is possible if you give the permissions and certs. The Charles proxy CAN act in as a MITM, but you have to in

> "can not be used to implement a MITM" Anything is possible if you give the permissions and certs. The Charles proxy CAN act in as a MITM, but you have to install Custom Certs on your computer (requires admin permissions). This is similar to how a password set by someone else won't protect your documents from that person. Don't let them set the password on your computer. "In Charles go to the Help menu and choose "SSL Proxying > Install Charles Root Certificate". Keychain Access will open. Find the "Charles Proxy..." entry, and double-click to get info on it. Expand the "Trust" section, and beside "When using this certificate" change it from "Use System Defaults" to "Always Trust". Then close the certificate info window, and you will be prompted for your Administrator password to update the system trust settings." [1] 1: https://www.charlesproxy.com/documentation/using-charles/ssl-certificates/ https://www.charlesproxy.com/documentation/using-charles/ssl...