Bank of England blog: HTTPS only<p>Bank of England primary website: HTTP only<p>They get bonus points for their Let's Encrypt cert and a solid 'A' on SSL Labs (some amusing alt names on the cert though - not their fault and no big deal).<p>Maybe someone at the bank will realize soon that HTTPS is for more than protecting log-ins, it guarantees the integrity of the page and makes sure the browser displays only and exactly what was sent, with no tampering in transit.