If your site has a CSRF flaw, then a CSRF attack can be launched against it by a MITM as soon as you access any other HTTP site. So it's best to use a trusted

If your site has a CSRF flaw, then a CSRF attack can be launched against it by a MITM as soon as you access any other HTTP site. So it's best to use a trusted network if the HTTPS site you're accessing has CSRF flaws. That was my point.