Did you watch the demo video[1]? Apparently some sites (Vanhoef’s example was Match.com) are suspectible to MITM by using Moxie Marlinspike’s sslstrip tool[2].

Did you watch the demo video[1]? Apparently some sites (Vanhoef’s example was Match.com) are suspectible to MITM by using Moxie Marlinspike’s sslstrip tool[2]. [1] https://youtu.be/Oh4WURZoR98 https://youtu.be/Oh4WURZoR98 [2] https://github.com/moxie0/sslstrip https://github.com/moxie0/sslstrip