Consider Tor: in this case, your &quot;ISP&quot; is a random server on the internet. Maybe your Comcast or TimeWarner ISPs will not be malicious, but with Tor, any one in the world can register to be an exit node&#x2F;ISP.  HTTPS helps protect you from attacks in this &quot;random ISP&quot; model.