To prevent a man in the middle attack. There's a possibility that a hacker could inject malicious scripts into the payload, or even completely change the content of the website that you think you are viewing.