Having private communication without knowing who you're talking to is not private at all. You need to first define who you want to hide the communication from (

Having private communication without knowing who you're talking to is not private at all. You need to first define who you want to hide the communication from (assumedly, everyone except the server in question), and then also know that you're really talking to that server and not just someone claiming to be that server. For example, if there were a class of websites where certificates were not checked, I could configure my router to man-in-the-middle attack every connection to one of those coming from anywhere in my own network, and then re-transmit information in the clear somewhere else. To someone inside my network, their browser would report their connection as being "secure".