Currently, the WIFI can still observe what sites you’re visiting (SNI still happens in plaintext) and, depending on the circumstances attempt a downgrade attack

Currently, the WIFI can still observe what sites you’re visiting (SNI still happens in plaintext) and, depending on the circumstances attempt a downgrade attack. Many people first try http and the destination then redirects, a lot of sites still don’t prevent that. For some folks you might even leverage something like the Sony rootkit. Once the connection is established, you’re fairly good, but until then quite a few things can go off the rails.