From 7e1b7d3b5ab862aae226ea26b6648f98bb1c6381 Mon Sep 17 00:00:00 2001
From: Hadi <112569860+anotherhadi@users.noreply.github.com>
Date: Mon, 18 May 2026 23:05:15 +0200
Subject: [PATCH] add warning for CA

Signed-off-by: Hadi <112569860+anotherhadi@users.noreply.github.com>
---
 docs/certificate.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docs/certificate.md b/docs/certificate.md
index 459a1da..a2d4df2 100644
--- a/docs/certificate.md
+++ b/docs/certificate.md
@@ -12,3 +12,6 @@
      - Select the "Authorities" tab and click on "Import".
      - Select the `mitmproxy-ca-cert.pem` file in `{{.Cfg.App.CertDir}}`.
      - When prompted, click the "Trust this CA to identify websites" checkbox, then click on "OK".
+
+> [!WARNING]
+> Never install this certificate in a permanent system trust store: it grants decryption of all HTTPS traffic. Remove it from your browser after use.