> Even over TLS? Are your connections being MITMed? Some corporate networks do MITM you and mandate HTTP only (we've seen this surprisingly often in the wild).

> Even over TLS? Are your connections being MITMed? Some corporate networks do MITM you and mandate HTTP only (we've seen this surprisingly often in the wild). Now, for most apps this isn't a concern since those employees probably wouldn't be allowed to use the app, but it can be quite important for apps that specifically target large businesses.