It's rare in practice because everyone and their mothers run HTTPS now.