they can just ban all hTTPS and whitelist banks, paypal, facebook etc