Comment by jchavannes

This is (one of the reasons) why you should use HTTPS Everywhere and enable blocking of all unencrypted requests. This isn't new.

You're susceptible to even worse MITM attacks if you allow unencrypted traffic when using public wifi.