We had built an iPhone app that retrieved HTML pages from a server, but then scanned for extra metadata that was embedded in HTML comments for things like what navigation options should be displayed to accompany that page.
We got a bug report from a user that the app broke when they used it on the free WiFi on the London Underground.
It turned out there was some weird proxy running on that WiFi network that stripped HTML comments and injected extra tracking code into pages!
Switching to https fixed the bug. I haven't shipped anything that uses plaintext HTTP since then.
We had built an iPhone app that retrieved HTML pages from a server, but then scanned for extra metadata that was embedded in HTML comments for things like what navigation options should be displayed to accompany that page.
We got a bug report from a user that the app broke when they used it on the free WiFi on the London Underground.
It turned out there was some weird proxy running on that WiFi network that stripped HTML comments and injected extra tracking code into pages!
Switching to https fixed the bug. I haven't shipped anything that uses plaintext HTTP since then.