I've had JS off for non-TLS sites for a while. Any site that wants to run JS should have the chops to know how to set up a cert. and my machine shouldn't be run

I've had JS off for non-TLS sites for a while. Any site that wants to run JS should have the chops to know how to set up a cert. and my machine shouldn't be running JS that could have been MiTM'd