Yes and no. Yes, on any sort of small network, you can be instantly MITM'd with basically no protection. No, in that on any sort of large scale traffic it bec

Yes and no. Yes, on any sort of small network, you can be instantly MITM'd with basically no protection. No, in that on any sort of large scale traffic it becomes impractical to filter, ie. with modest hardware you can trawl through http at say 10Gbps, it's basically impossible to MITM at that sort of speed without much greater hardware requirements. Imo, having a self signed certificate simply appear to be http, ie. no "secure" icon, no locks, etc. would be a good middle ground.