I don't think that an argument that using HTTPS actively decreases the security of a connection really holds all that well. If you don't think OpenSSL is a hig

I don't think that an argument that using HTTPS actively decreases the security of a connection really holds all that well. If you don't think OpenSSL is a high enough quality implementation, there are many others to choose from. Even with a range of mirrors, it would still raise the bar for attackers, to require HTTPS.