HTTPS in the real world: explanation and criticism | Robert Heaton