> I would also add that attackers are actually after the data. Not strictly true - depending on the parties it's still a very desirable goal to be able to snoo

> I would also add that attackers are actually after the data. Not strictly true - depending on the parties it's still a very desirable goal to be able to snoop on a site's continued operations, inject some code into visitors' pages, or just have a platform for further attacks.