Update, this sibling post claims that HN is at least a well-configured website; and so MITM attacks will be on the upper end of the normal difficulty range: https://news.ycombinator.com/item?id=7421558