I’m aware of the plications of HTTPS, I’m a systems engineer with 37 certifications and 2 degrees. I’ve been a systems engineer for 25 years…So I dig it.
The issue is someone coming here that’s made absolutely no contribution to community throwing around “Incompetence & carelessness”.
If he wants to help then offer to buy the certificate. If not, catch out.
Now, to be constructive. If you want alleviate the concerns about pilfered passwords and someone capturing your personal passwords by doing a capture on open traffic, then get a personal VPN service. I use one everytime on the internet u less I’m on my home or corp network.