If snooping and falsifying web traffic is so easy when plain old HTTP is used, why do we still have HTTP at all?