In theory it should be safe. But sometimes something could force the encryption down to a lower standard and also capture the initial key exchange. Then it migh

In theory it should be safe. But sometimes something could force the encryption down to a lower standard and also capture the initial key exchange. Then it might be cracked. Also normal websites without https will open you up to session hijacking.