Bank Underground, the blog written by Bank of England staff
Bank of England blog: HTTPS onlyBank of England primary website: HTTP onlyThey get bonus points for their Let's Encrypt cert and a solid 'A' on SSL Labs (some amusing alt names on the cert though - not their fault and no big deal).Maybe someone at the bank will realize soon that HTTPS is for more than protecting log-ins, it guarantees the integrity of the page and makes sure the browser displays only and exactly what was sent, with no tampering in transit.