In one of the major announcements for Chrome, 'Moving towards a more secure web' (2016-09-08) [1], the Chrome Security Team writes:
"Chrome currently indicates HTTP connections with a neutral indicator. This doesn't reflect the true lack of security for HTTP connections. When you load a website over HTTP, someone else on the network can look at or modify the site before it gets to you."
The word 'modify' is a hyperlink to an article titled 'AT&T Hotspots: Now with Advertising Injection' [2] (ironically, a non-HTTPS site).
"Chrome currently indicates HTTP connections with a neutral indicator. This doesn't reflect the true lack of security for HTTP connections. When you load a website over HTTP, someone else on the network can look at or modify the site before it gets to you."
The word 'modify' is a hyperlink to an article titled 'AT&T Hotspots: Now with Advertising Injection' [2] (ironically, a non-HTTPS site).
[1] https://security.googleblog.com/2016/09/moving-towards-more-... [2] http://webpolicy.org/2015/08/25/att-hotspots-now-with-advert...