Just your ISP, their ISP, your hosting provider (if applicable) and the browser vendor.

Adding in an optional HTTPS there would not greatly increase the amount of intermediaries, though I by no means argue that it matters.