There is a lot of talk along the lines of "at least important things use HTTPS now." Well, for WAN traffic, that's largely true. For corporate/university intranets, not so much. For example, SMB (network shares) only supports encryption as of version 3.0, and a server admin who disables handshaking below v3.0 is disallowing Windows clients below 8.

    if (win7 && smb && wpa2) then vulnerable to password theft