If you're not using https, then you've always been subject to the attacks (man in the middle), right? I just wouldn't want to give the impression that if you use GzipMiddleware without SSL you are somehow more secure than https + gzip.

@evildmp You'll notice this when you rebase, but I added a warning in da843e7dba4ae8ed2846475564bb6ded82960827 (referencing the docs rather than the blog post)