A lot of apps don’t need user data to be completely private. Take Twitter for example, all their stuff is public. But for DM they’re all private. For these case

A lot of apps don’t need user data to be completely private. Take Twitter for example, all their stuff is public. But for DM they’re all private. For these cases you can encrypt the data inside the http requests so only the intended receiver can decrypt. Doesn’t need TLS.