Especially point 4 («Not having your content modified by carriers») is getting more and more important these days. Whenever I hear people saying that they don&#x27;t need https as they are providing a strictly read-only experience I always wonder what they will say as their ads get replaced with other ads by carriers and other &quot;transparent&quot; proxies in between.<p>And if your site is only moderately complex and using some of the more advanced HTTP features (pipelining, websockets or plain long polling), you might be better off using SSL too because by now the likelyhood of any of this working unhindered by various &quot;security&quot; and &quot;traffic optimization&quot; tools is approaching zero very quickly.<p>On the other hand, I wonder how long it&#x27;s going to take before carriers and providers in general mandate the installation of a root cert &quot;for your security&quot; in order to be able to continue messing with the traffic to insert ads or &quot;increase security&quot;.