I can&#x27;t believe checking for malware signature, which can be done much more easily from the browser (and is already done, indirectly and efficiently by chrome for instance), justifies MITMing everyone at great expense.<p>In any case, signature check is not going to be useful in any scenario of targeted attack that I can imagine.<p>I can easily believe, though, that some BOFH is more than happy to retrieve the amount of logs he has in the good old days of plain http.