Yes, it is worth it, and, no, this particular engineering leader displays no such skill here. It was somewhat debatable several years ago, when the whole "switc

Yes, it is worth it, and, no, this particular engineering leader displays no such skill here. It was somewhat debatable several years ago, when the whole "switch to https" movement just started growing traction, and, yes, there are some questionable moments, as with FTP. But today TLS-by-default is pretty much a standard practice for any public web-page like this, there's no trade off to make here, and it can be argued it undermines my privacy as a visitor, since instead of just revealing that I'm visiting mit.edu to the network, I have no choice but to reveal what page I'm visiting and what I'm reading there. Furthermore, the network owner may decide to serve me any bullshit instead of this very important official MIT statement, and I will have no way of knowing that.