Comment by dukky

But https doesn't 'let you know for sure that the content is exactly what the owner of the site intended' as it doesn't protect you from xss