Yes, can attest to that. I had a BSNL connection, which would always inject some JavaScript/etc stuff for Http sites. With HTTPS sites they could not do anything. But I got rid of the connection anyway.