Will it always be a "low profile blog"? It just got on the front page of HN, which is not exactly "low profile".

As for what risk, two words: Great Cannon. For those who don't know, it's a well-known MITM attacker which injects JavaScript code on non-HTTPS pages, the injected JavaScript being used to do distributed denial of service attacks on other sites. Using HTTPS protects against these kinds of attacks.

I for example just wouldn't like anyone to be able to see what data I exchange with any server, be it small profile blog or a login page.

    I for example just wouldn't like anyone to be able to see what data I exchange with any server, be it small profile blog or a login page.

Note: It's really, "see and modify undetected" what data you are exchanging with any server.

It results in your browsing history being tracked and sometimes sold by your access point and ISP at a page level instead of just domain level, results in injected ads and banners on some access points, results in injected trackers on Verizon, and more broadly it permits unknown third parties to alter the content of your website.

If someone wants to track you, they can just mark the frame. Marking packets isn’t anything new,