Compromising the consumer Laptop or computer, for example by putting in a destructive root certificate in the method or browser trust keep. This can be a disincentive emigrate to HTTPS, mainly because it deprives linked HTTP sites of analytics info, and means the HTTPS Site won’t get “credit rating” for http://XXX