I get where you&#x27;re coming from and I <i>want</i> to agree with you but...<p>While that used to be true, based upon recent history we, unfortunately, can&#x27;t blindly trust HTTPS to always be &quot;secure&quot; 100% of the time anymore -- whether due to things like Heartbleed, fake certs signed by a root CA, protocol attacks, or some other vulnerability that hasn&#x27;t even been discovered yet.