@ryanc People misunderstand that just because it appears as https, does not mean that the initial handshakes were secure in the first place.