> But as an application developer, do you want to manage certificates? It might take years of trying to avoid TLS to learn that all the alternatives are far wo

> But as an application developer, do you want to manage certificates? It might take years of trying to avoid TLS to learn that all the alternatives are far worse. So—yes, just bite the bullet, it's not that bad once you internalize the model, and you really only need to solve this once per organization.