Without https MANY places will silently MITM your connection. I remember reading that a major site, I think netflix, was having a low consistent level of page l

Without https MANY places will silently MITM your connection. I remember reading that a major site, I think netflix, was having a low consistent level of page load failures and couldn't figure it out. When they went to HTTPS all the problems went away, apparently the culprit was code and HTML injected into their pages by 1) wifi hotspots - this is REALLY common, how do you think they redirect you to their login page? 2) content filters like sonicwall - I used to work in an IT consulting shop, these are EVERYWHERE. And they don't just filter, they record every page of every site you visit. Expect any non-residential wifi to be reading all of your non-encrypted traffic. 3) crappy ISP's trying to serve ads 4) bad actors on public wifi - this is common at the airport, meeting halls, and conventions. Even encrypted wifi is vulnerable as long as the attacker is on the same network (if they have wireless isolation off, which most places do for printers).