Hacker News Reader

it does say "Not secure" for the https info, so I guess they intercept the request

yeah but not secure is regular http. on https they cannot do that without triggering a browser warning.