SSL Strip Downgrade Attack

A classic MITM attack: the attacker intercepts HTTP-to-HTTPS redirects and rewrites HTTPS links to HTTP. The client believes they're on a secure connection but everything is transmitted in cleartext. HSTS is the key defense.