Updated: better explanation on why we want to use HTTPS