These are my personal notes for estting up Nix with ZScaler.
ZScaler eavesdrops on all communication, which is indistinguishable from a MITM attack.
Trust the cert in the KeyChain cert store. Then export the bundle to
/etc/ssl/certs/ca-certificates.crt
: