> But is it an actual, practical, meaningful threat vector or an issue Back when http was common and 3G was still kinda expensive, many public WiFi networks wo

> But is it an actual, practical, meaningful threat vector or an issue Back when http was common and 3G was still kinda expensive, many public WiFi networks would MITM all the web pages you request to inject their own ads into them. A notable example I remember vividly - the public WiFi network of Moscow Metro used to do this for non-paying customers, and it was particularly bad because 3G/4G did not work well underground back then. This alone was a good motivation to switch my plain-html ad-free websites to https as soon as Let's Encrypt became a thing.