> And let's face it - browser warnings about bad certificates are generally ignore That's getting harder and harder to do. Doesn't Chrome require you to find t

> And let's face it - browser warnings about bad certificates are generally ignore That's getting harder and harder to do. Doesn't Chrome require you to find three hidden buttons and enter a password to ignore the warning? > Should I really have to pay someone to find out if a car has been used as a rental car or in an accident? I don't follow... You don't need a certificate and the site can get a free one from LetsEncrypt > If I'm looking at a congressman's voting history, is there a real benefit to that data being transmitted via an https session vs. http? ... not yet :) But yes, it may allow to make certain conclusions regarding your interests, maybe your place of residence etc. But the larger idea here is to get users and the infrastructure accustomed to encryption. Chrome and Safari, for example, are moving towards treating any non-encrypted site as a security risk. That only works if the overwhelming majority of sites actually are encrypted, or it will just annoy people. > There's a layer of complexity in the way that isn't necessary or helpful which is motivation to improve the tooling. With LetsEncrypt the whole process has already become much easier. It's only a matter of time until SSL just works, the same way lots of other protocol negotiations invisibly happen today. > What happens when we're accessing data from a custom device with minimal resources They'll have slightly less-minimal resources. SSL really doesn't require a Cray anymore. IoT-devices without encryption are a privacy nightmare, anyway. Some of them actually have access to extremely sensitive data or, even worse, can control critical hardware – c.f. pacemakers. > And what happens when a guy working a low level office wants to expose a web service for something like viewing an event calendar? He'll use google calendar, same as now. People who can't configure SSL have no business exposing services to the internet.