2019 年年初的時候 TechCrunch 爆出 Facebook 透過付錢給使用者，透過 VPN (以及安裝 Root CA) 記錄使用者的行為：「Facebook 花錢向使用者購買他們的行為記錄」，最近揭露的文件透漏了當年的目的：「Facebook snooped on users’ Snapchat traffic in secret project, documents reveal」。
TC 這邊的文章裡面沒看到信件，另外找了其他報導：「Project Ghostbusters: Facebook Accused of Using Your Phone to Wiretap Snapchat」，裡面有兩份資料是信件往來的部分：「Document 735」、「Document 736」。
裡面可以看到想要取得 Snapchat、YouTube、Amazon 這些使用行為：
The goal of Facebook’s SSL bump technology was the company’s acquisition, decryption, transfer, and use in competitive decisionmaking of private, encrypted in-app analytics from the Snapchat, YouTube, and Amazon apps, which were supposed to be transmitted over a secure connection between those respective apps and secure servers (sc-analytics.appspot.com for Snapchat, s.youtube.com and youtubei.googleapis.com for YouTube, and *.amazon.com for Amazon). Id.
然後信裡還有提到是用 Squid 實作的：
Today we are using the Onavo vpn-proxy stack to deploy squid with ssl bump the stack runs in edge on our own hosts (onavopp and onavolb) with a really old version of squid (3.1).
這次的訴訟裡提到了 18 U.S. Code § 2511 - Interception and disclosure of wire, oral, or electronic communications prohibited，看起來會是聯邦層級的刑事案件...
那是個還不流行 certificate pinning 的年代...？