No, this is ridicoulus. The browser does not execute a jpeg. It displays it. The reason malwares worked was insecure automatic execution in IE. You do NOT need

No, this is ridicoulus. The browser does not execute a jpeg. It displays it. The reason malwares worked was insecure automatic execution in IE. You do NOT need https for the browser to type check and securely sandbox downloaded data. MITM is not the problem, because if I can send a malware from my https server you still have the problem, all https does is waste a ton of electricity for your job (in)security. If your browser requests a jpeg an my https server returns a exe that the browser saves and the user is foolish enough to execute it, that is not a http problem. Stop using your monopoly to force waste.