In terms of MITM attacks, yes, they were trusting Even back in 2010 lots of sites were http, like Facebook, & there was FireSheep which would snoop on public w

In terms of MITM attacks, yes, they were trusting Even back in 2010 lots of sites were http, like Facebook, & there was FireSheep which would snoop on public wifi for people logging into sites over HTTP