Since everyone has blogged about SuperFish and other Komodia products we can skip all that and get to the good stuff. It’s extremely easy to sniff SSL traffic and get headers, cookies, whatever you want from an HTTPS request if you are able to control the traffic.
more here..........http://pashakravtsov.com/2015/03/03/SuperFish-SSL-Sniffing/
more here..........http://pashakravtsov.com/2015/03/03/SuperFish-SSL-Sniffing/