11-07-2020, 01:54 PM
Whether or not this is a banking website or not is irrelevant to whether or not HTTPS is useful. Any website served over HTTP is subject to injection of malicious stuff like ads, cryptominers, drive-by attacks, phishing, or worse, whether it is your bank's website or a website with nothing but a GIF of a dancing cat on it. This is not just hypothetical, this is actually happening in the wild in the real world.