>assuming it's implemented without bugs, The problem with this assumption is that available evidence points towards software inevitable having, developing or g

>assuming it's implemented without bugs, The problem with this assumption is that available evidence points towards software inevitable having, developing or gaining bugs in the implementation (through existing code, through new code or through new threat vectors respectively). The current design isn't insecure but it could be more secure at little cost. In current times, SSL is fairly practical and easy to use, a lot of popular webservers either have or are developing ACME certificate mechanisms (including nginx and apache to my knowledge). Due to the low cost, designing SSL into the system should be a requirement since it's an improvement of low cost with great effect.