Yes, but if the target site does not use https there is no alternative.

It protects the first hop for request data. But response data could be interfered with too.