SSL is a pretty terrible hack to patch over the fact that we don't have a internet protocol version "7" that guarantee point-to-point secure (ie: encrypted, aut

SSL is a pretty terrible hack to patch over the fact that we don't have a internet protocol version "7" that guarantee point-to-point secure (ie: encrypted, authenticated) communication. This is the reasoning behind http2/3 - you pretty much never want "get me this thing with this name, show it to everyone, and let everyone on the wireless lan, my isp, their cdn etc modify everything I send and receive". The biggest problem with ssl everywhere is that it complicates the elegant multilevel caching http easily allows - and I think an easier opt-out of this privacy aspect would be good (an easier way to set up a caching squid proxy on your lan that transparently caches os updates, package updates, Netflix episodes, world of War craft patches, news site front pages...). It's more or less still possible - but it's all or nothing: if you allow ssl stripping, the proxy gets your web mail even if you just want it to cache os updates and a handful of web sites. At any rate, you're still using the os network stack, so maybe you're running ppoe and ipsec down there.. As "part" of your web browser...