> Which is the point, it is possible and they can and will. It's why a VPN is important, it's the only solution that can stop them. ^_^
I kinda still disagree—because ISPs won't really be able to send the modified content if the user doesn't ignore the warnings. And to be fair I know of non-techie users who get sufficiently scared of warnings like the one for invalid certs to not just click on 'ignore'.
But yeah, it's also true that others aren't as careful, and that VPNs could give them an added layer of protection or privacy. I don't mean to invalidate your advocacy of VPNs 😅 I was just surprised at the implied claim that ISPs can tamper with encrypted HTTP traffic.