> If they're HTTP, they're insecure, which makes them an open attack vector. No it doesn't. HTTPS ensures that the data is not spied on or tampered with by tho

> If they're HTTP, they're insecure, which makes them an open attack vector. No it doesn't. HTTPS ensures that the data is not spied on or tampered with by those in the middle (so it does protect against what Comcast does), but does not prevent any other sorts of attacks (e.g. the server operator adding malicious files into their own server).