>>204710
>>204711
My employer puts Zscaler on our machines as a MITM proxy, which is often a giant pain the ass, but now at least it is a single central place to reject compromised certs while individual cert stores get updated.