Furthering HTTPS adoption is the best way we have to combat pervasive surveillance No it isn't. HTTPS fights passive surveillance. The pervasive surveillance

Furthering HTTPS adoption is the best way we have to combat pervasive surveillance No it isn't. HTTPS fights passive surveillance. The pervasive surveillance is already inside the HTTPS link, and deliberately so. The actual best way we have to combat pervasive surveillance is to grow a spine and work to end the 1st and 3rd party surveillance our organizations implement, rather than just bitching about surveillance on the internet. There are only a few actors positioned on the network that can passively perform surveillance pervasively (not just incidentally). My threat model extends beyond the NSA and ISPs. We've been taught to hate and fear them, but I'm sick of only thinking about the last crisis instead of focusing on the underlying problem.