HTTPS is about encryption with no preshared secrets, and proving the origin’s authority (the CA part of TLS). OTP is about authenticating clients, using a pres

HTTPS is about encryption with no preshared secrets, and proving the origin’s authority (the CA part of TLS). OTP is about authenticating clients, using a preshared secret established by unspecified means. They’re completely different things. It’s like you’re comparing Apple (the company) and Orange (the city in NSW, Australia). Cleartext HTTP is bad for various reasons, one of which is that pervasive monitoring is an attack: https://www.rfc-editor.org/rfc/rfc7258.html https://www.rfc-editor.org/rfc/rfc7258.html.