> Your worst case scernaio is so mild: nothing lost. Not really. With Let's Encrypt available, the browser makers are now talking about penalising all HTTP si

> Your worst case scernaio is so mild: nothing lost. Not really. With Let's Encrypt available, the browser makers are now talking about penalising all HTTP sites. Next year, or the year after that, they could decommission Let's Encrypt (or start charging), and suddenly we'd all see what had been lost: it'd no longer be possible to set up an unpenalised site for free. Personally, I believe that an IP cert should be issued along with one's IP address, and a hostname cert should be issued along with one's domain name.