Comments by "Samuel Lourenço" (@samuellourenco1050) on "" video.

With or without SSL, it made no difference since this was not a phishing attack, but a man-in-the-middle one. Phishing is easy to detect if you pay attention. Here, the reported used his usual address (no phishing), and the "evil twin" network captured his encrypted credentials, and the public key that was sent before. Not that easy, but still doable.
1