The "fun" thing about this article is that pretty much every claim they make is debunked one or two paragraphs later, but that doesn't seem to be stopping them

The "fun" thing about this article is that pretty much every claim they make is debunked one or two paragraphs later, but that doesn't seem to be stopping them from making click-baitish claims. I'd almost be willing to accept this, because while we do have tons of new mechanisms such as HSTS and HPKP that prevent most of this from happening, and while most big sites have adopted at least HSTS, the same thing certainly cannot be said for every single financial institution and many other sites out there. So I guess there is some truth to the statement that HTTPS is no silver-bullet for public networks ... yet.