This is good, but still not a good as a service that requires at least an unauthenticated encryption. The problem is that the attacker has to be active, but ver

This is good, but still not a good as a service that requires at least an unauthenticated encryption. The problem is that the attacker has to be active, but very little effort is needed to break this without the user noticing - it's enough to inject some packets to disrupt the TLS connection. However, for HTTP it's the best thing possible at this point.