> If you're not doing anything requiring security, you don't need HTTPS, IMHO. There have been documented attacks of people getting hacked because they were br

> If you're not doing anything requiring security, you don't need HTTPS, IMHO. There have been documented attacks of people getting hacked because they were browsing the web with plain-HTTP and someone injected malicious pages mid-stream; see "Quantum Insert": * https://www.infoworld.com/article/2609621/uk-spy-agency-uses-nsa-attack-to-hack-slashdot--linkedin-users.html https://www.infoworld.com/article/2609621/uk-spy-agency-uses... * https://www.wired.com/2015/04/researchers-uncover-method-detect-nsa-quantum-insert-hacks/ https://www.wired.com/2015/04/researchers-uncover-method-det...