HTTPS is not about hiding secrets. Most of what it protects is boring. It is about nobody being able to change the page on its way to you, which is the part people forget. #dev