Assuming that I have a certificate for my local webserver signed by a well known CA like Verisign (so it will be trusted by browsers), and I'm able to DNS poisoning in Man-in-the-Middle to redirect a user who wants to go to
google.com on my local webserver who has the same hostname
google.com, what will be the consequences?
Is there a risk? If so, how to prevent it?
I don't know why SSL pinning is only used for mobile app. If the attack above works, so SSL pinning can be a prevention. But it's not used on computer...