Anybody could intercept the connection with an unsigned connection. At least they could have used HSTS so that only the first visit is vulnerable. If you have a

Anybody could intercept the connection with an unsigned connection. At least they could have used HSTS so that only the first visit is vulnerable. If you have a signed cert the NSA has to work harder; there are more logs and it's more riskier for them.