the assumption is that the javascript would be injected into the page on its way from steam servers to your browser. ssl would prevent that. i think you're imag

the assumption is that the javascript would be injected into the page on its way from steam servers to your browser. ssl would prevent that. i think you're imagining a case where a user has (for example) installed a malicious browser extension. ssl would not help with that.