wkrp

Thank you, I stand corrected. Even so, it strikes me as a strange implementation choice. TLS MITM in an external proxy, sure, but in a browser extension it shouldn't be...

That's fair. While it's possible for a browser extension to craft HTTPS requests where SNI ≠ Host, I see see how it might not be possible to make that work...