Comment by ChrisAntaki

> If it's public static content, what is SSL protecting?

Comcast was recently caught injecting self-promotional ads via JavaScript injection. Sites using HTTPS are immune from this sort of attack. [1]

[1] http://arstechnica.com/tech-policy/2014/09/why-comcasts-java...