force-http

the story...

The solution

Sslstrip

- arpspoof

- dhcp

- fake AP

- ICMP redirect

The good guys solution

HSTS

Dont worry, you can still have fun :D