This is from 2011, when people (usually correctly) believed things like "SSL certificates are expensive," "SSL connections are expensive," "it's reasonable to h

This is from 2011, when people (usually correctly) believed things like "SSL certificates are expensive," "SSL connections are expensive," "it's reasonable to host just the secure parts of your website on SSL," "if you only need authenticity and not confidentiality, it's better to avoid SSL if possible," etc. In the years since 2011, we could have implemented high-quality side-channel-resistant JS crypto libraries (plus added browser features to allow storing secret data that wasn't accessible to the website, auditing JS source, etc.), or we could have just deployed SSL everywhere. The world chose the latter, and it was a better choice.