[woodrowbarlow]

even if you have something like a "donate" link that's goes to a third party payment processor. a MITM could redirect that link the their own paypal collections page.