Comment by konform

Actually intercepting the cleartext data is less trivial (not inherently - the browsers just make it more obscure than it could be) but it can be done.

https://news.ycombinator.com/item?id=46820977