This may not be effective in some cases, given the NSA's history of targeting the plaintext before it gets wrapped in SSL. (i.e. the infamous "SSL added and rem

This may not be effective in some cases, given the NSA's history of targeting the plaintext before it gets wrapped in SSL. (i.e. the infamous "SSL added and removed here! :-)" sketch of Google's network[1]). Additionally, far too many sites use cloudflare (or similar) to provide their SSL creating a single point of failure and a tempting target for eavesdroppers. (and who knows how many don't bother to encrypt the requests from the SSL proxy back to the actual serve?) [1] https://www.washingtonpost.com/world/national-security/nsa-infiltrates-links-to-yahoo-google-data-centers-worldwide-snowden-documents-say/2013/10/30/e51d661e-4166-11e3-8b74-d89d714ca4dd_story.html https://www.washingtonpost.com/world/national-security/nsa-i...