So, um. These all sound like issues in the way we construct our web of trust, and not in the actual cryptography underlying SSL/TLS. I'm not seeing any alternat

So, um. These all sound like issues in the way we construct our web of trust, and not in the actual cryptography underlying SSL/TLS. I'm not seeing any alternatives or fixes proposed, just lots of criticism with no actual direction. "Encrypt everything," is what this researcher is saying; isn't the entire point of SSL/TLS to encrypt everything? Am I missing something here?