The ForceHTTPS paper contributes a simple idea as well as a useful related work section surveying other approaches to securing https. 1) What is the main idea proposed by ForceHTTPS? 2) In the related work, what kind of attackers secure cookies protect against and what kind of attackers they do not protect against and why? 3) How does ForceHTTPS improve secure cookies?