>isn't that a result of your relationship with your isp? Any ISP is allowed to sniff and manipulate packets, so this isn't just about my ISP -- it's the server

>isn't that a result of your relationship with your isp? Any ISP is allowed to sniff and manipulate packets, so this isn't just about my ISP -- it's the server's ISP as well as any entities in-between. Even if I did (assuming that I reasonably could!) change my ISP, that's changing only one of the potentially many hostile actors. >why wouldn't you use a vpn That would require me to trust the connection between the VPN and the server. Plus, then I would need to buy a VPN subscription :) Just serve HTTPS!