Yahoo To Encrypt All Traffic And Products By Early 2014
techweekeurope.co.ukThat still does not stop the NSA from directly taking data from Yahoo.
and Man-in-the-middle attacks are still possible at least in the LAN using something like SSLStrip.
It's a big step in the right direction.