I think this is a good start. But it is also important to educate users that even you are using HTTPS, some companies' internal network might not be fully encr

I think this is a good start. But it is also important to educate users that even you are using HTTPS, some companies' internal network might not be fully encrypted and therefore it is not fully secure against some three-letter government agencies :)