> Would the malicious wi-fi service be able to supply a phishing version of www.somewebsite.com that also uses https Yes it would. But a browser would show a g

> Would the malicious wi-fi service be able to supply a phishing version of www.somewebsite.com that also uses https Yes it would. But a browser would show a giant red warning. The real issue is many protocols, like DNS, are not encrypted. Also if you're a developer chances you use a non encrypted protocol are much higher.