3 ms·

HTTPS won't help against attacker that has a jurisdiction over CA and can force them to issue a certificate.