If you don't have extensions that force HTTPS on all content, you could, for example, get served a malicious image file. from the article: > they won’t be abl

If you don't have extensions that force HTTPS on all content, you could, for example, get served a malicious image file. from the article: > they won’t be able to pretend to be a secure site like your bank on the wifi, but they can definitely pretend to be non-secure resources