Looks like someone already wrote a post about it: https://blog.filippo.io/komodia-superfish-ssl-validation-is-...