Yeah, I struggle to think of any good analogy that would help explain the problem. You could explain HTTP as like sending a postal letter where an attacker can intercept and read the letter undetected, reply back as if they were the receiver etc . but that&#x27;s already pretty abstract. Drawing a real-world analogy with automated password attacks seems even harder.