Hacker News new | ask | show | jobs
by kakarot 3172 days ago
If you don't have extensions that force HTTPS on all content, you could, for example, get served a malicious image file.

from the article:

> they won’t be able to pretend to be a secure site like your bank on the wifi, but they can definitely pretend to be non-secure resources