> If the risk is that an ISP would spoof the entire website at AI, then that can be done regardless of HTTPS. No, an ISP cannot spoof a valid certificate for a

> If the risk is that an ISP would spoof the entire website at AI, then that can be done regardless of HTTPS. No, an ISP cannot spoof a valid certificate for a website