HTTPS has its own downsides, and I disagree that you should always use it. When accessibility is paramount, HTTP is still better, because the risk of MITM is o

HTTPS has its own downsides, and I disagree that you should always use it. When accessibility is paramount, HTTP is still better, because the risk of MITM is overtaken by all the things that can break with HTTPS, such as: Wrong SSL version Client date is off Client doesn't have proper certs installed Server cert is broken or misconfigured SSL takes too long to set up over slow connection No one's going to MITM my blog, while using HTTPS often impairs my own ability to use it. Also, if you think HTTPS can't be intercepted and spoofed by anyone, you're kidding yourself.