SSL Observatory: tell users when they're being MITMed by a locally-trusted root CA
The Observatory knows when people are accepting non-standard certs issued by a local root CA that's deployed via a MITM proxy. It should tell the user this information.