Other have pointed it out, but ISPs (especially on mobile, at least in portugal) often do this. They add a little banner on the top to tell you some random bull

Other have pointed it out, but ISPs (especially on mobile, at least in portugal) often do this. They add a little banner on the top to tell you some random bullshit about their data plan or some other such shit they want to sell you. As for attacks, others have pointed out examples as well, and I can assure you you can go far with them (and often with some simple social engineering). HTTP is just a no-no for me as a developer.