How to inspect iOS's HTTP traffic without spending a dime

The real WTF in that article is the trace of DropBox issuing calls to its API over HTTP instead of HTTPS.