> All HTTPS does is ensure security between your client and the server with the private key of the certificate. Just for completeness, HTTPs does not necessari

> All HTTPS does is ensure security between your client and the server with the private key of the certificate. Just for completeness, HTTPs does not necessarily guarantee you are connected to the right server. This depends on the CAs you trust. For example, larger enterprises commonly inject their own CA into their workstations in order to prevent loss of sensitive data. This allows SSL inspection proxies to terminate all SSL connections with a valid, trusted certificate from the perspective of that workstation. .