&gt; But HTTPS does not mean 100% secure, it&#x27;s easy to be hacked by MITM or traffic been spied.<p>I don&#x27;t know what properties you think HTTPS lacks here, but no, HTTPS doesn&#x27;t allow &quot;easy&quot; MITM or eavesdropping.  If you want to break HTTPS, you either need to compromise an endpoint, or pressure an accepted certificate authority to risk destroying their entire business by issuing a fraudulent certificate.