Any change in how PKI is used in a browser must be done by browser vendors, no change has been their decision. The idea spread that TLS should be used after Sn

Any change in how PKI is used in a browser must be done by browser vendors, no change has been their decision. The idea spread that TLS should be used after Snowden is a bizarre antipattern. HTTP cache appliances have been rendered obsolete, and domain-validated certificates only provide assurances that you are connecting to the same server that LetsEncrypt had connected to.