So... you are both correct and not, which is probably why you're getting downvoted. Is much of the current tech overengineered? Yes, it definitely is. HTTPS o

So... you are both correct and not, which is probably why you're getting downvoted. Is much of the current tech overengineered? Yes, it definitely is. HTTPS on it's own - having TLS and a certificate - is not. It never was. But with stapling, CORS, X-XSS, and the rest, it becomes a beast. Those are becoming requirements, and they are making things _very_ complicated. I hear you, and I tend to agree on many things. Serial ports were gloriously simple whereas USB3 is a nightmare on every level. VGA was beautiful in it's simplicity, HDMI 1.4 with Ethernet included is certainly too much. mta-sts is probably the worst idea that could have been added to email, by relying on HTTPS requests. My personal take on this: use all of them responsibly. Use HTTPS, but don't make it exclusive, let the user make the choice: keep HTTP as well. Leave CORS, STS, Referrer Policy, etc out.