Security when sending http traffic and what should be feared?

Question

Information Security

I would like to know the extent of the problem when using an unencrypted connection. Suppose, when transferring passport data, who exactly can and will read them, without a targeted attack? How is the situation in practice, can some service installed by an unknown person monitor all passing traffic and vacuum potentially important information from it? Explain, please.

Answer 1

The most voluminous here - https://www.anti-malware.ru/analytics/Threats_Anal...

Answer 2

> when transferring passport data, who exactly can and will read them
Sniffer on any intermediate node.