> If it's for some commerial or sensitive thing then yeah, just HTTPS is okay. It wasn't before the attacker inserted themselves, but now it is and there's a c

> If it's for some commerial or sensitive thing then yeah, just HTTPS is okay. It wasn't before the attacker inserted themselves, but now it is and there's a credit card form for a seemingly legitimate service on your site.