One of the problems with http is that nobody bothered to implement some kind of integrity check for http content (and make sure that it got wide deployment). Th

One of the problems with http is that nobody bothered to implement some kind of integrity check for http content (and make sure that it got wide deployment). There are too many examples of parties messing with http content. So if people cared about transparent caching, they should have added integrity checks ages ago. Now it's too late. It is interesting to compare with DNS. DNSSEC is basically just an integrity check. These days the lack of privacy is considered a serious issue. And DNS is likely to move to TLS as well.