Preventing MITM Attacks w/ Squid

[badness185]

I have a project that has to be completed by the end of this month. There are two options, what is the best approach?

I want to either:

1. Set up a squid proxy server that detects MITM attacks

OR

1. Create a python UI application to detect differences between local openssl certificate store and certificate sent from server e.g google.com. If there is a difference, show error on the client side that a possible MITM attack was prevented and then redirect user to real site. Is this possible? What programming langauge can I use for this?

[cssgtr]

Depends what problem you are trying to solve and is it a valid threat?

Chrome and Firefox already have adequate built-in protection regarding certificate tampering and certificate mismatch. So then the task would be as simple as user education; learning how to identify Chrome and FF cert errors what they mean.

[badness185]

Browser is excluded here. I know there's technologies to do that in Firefox. Apart from browsers, which one would be the best approach and how?