You're missing your very own point again. You guys are up in arms about potential attacks against the client or the network. Attacks that having nothing to do w

You're missing your very own point again. You guys are up in arms about potential attacks against the client or the network. Attacks that having nothing to do with the web server. I am giving examples of how that class of attacks is not mitigated by HTTPS. I am not talking about SSL stripping. I am talking about not even letting the client talk to the remote host because in the scenario where you MITM you have control of the network.