story
and Man-in-the-middle attacks are still possible at least in the LAN using something like SSLStrip.