Ha, good question. Generally, everyone switched to HTTPS. But that doesn't protect against situations like with Yahoo, where the agencies were tapped-in after the SSL termination. I guess it's not a stretch to assume it's still going on.