Actually, your ISP is a local passive attacker.