Most sites will send a redirect to HTTPS, which CoffeeShopWifi does not.
So I decided it's safe to make a cert and support HTTPS.
They could stop serving port 443. That would prevent any extensions from automatically upgrading.