Bank of England blog: HTTPS only

Bank of England primary website: HTTP only

They get bonus points for their Let's Encrypt cert and a solid 'A' on SSL Labs (some amusing alt names on the cert though - not their fault and no big deal).

Maybe someone at the bank will realize soon that HTTPS is for more than protecting log-ins, it guarantees the integrity of the page and makes sure the browser displays only and exactly what was sent, with no tampering in transit.