>You can’t always ensure that all traffic goes over SSL. DNS traffic is an example. But wouldn't you get a cert error if someone messed with the DNS to send yo

>You can’t always ensure that all traffic goes over SSL. DNS traffic is an example. But wouldn't you get a cert error if someone messed with the DNS to send you to a different IP than you would normally? (Especially if they're using pinned certs, which many sites do now)