Originally Posted by
jinglish
I know that GoGo was at one point issuing fake SSL certificates, but they stopped once a Google security engineer called them out for it on Twitter.
https://community.digicert.com/en/blogs.entry.html/2015/01/08/gogo-inflight-internet-is-intentionally-issuing-fake-ssl-certificates.html
In fairness, you get a pop up telling you that the cert is bogus. In other words, you don't need to be a security engineer to figure it out.
So, yes, they issue fake certs, but your device knows they are fake. This isn't really a security issue -- the system is working as intended.
What really happened here is that someone was trying to access YouTube on the plane (which gogo doesn't allow) and this is how gogo blocks it. There are definitely better solutions to the problem, but this isn't the security issue that it's made out to be.