> This is not true, as this could easily be my MiTM Proxy that is substituting your self signed public key

Yeah, but with the current model it could also be subsituted with a cert for which comodo has fucked up the verification again.