> HTTPS end to end isn't really worth it for some things. Don't agree. Serving HTTPS is cheap now, and it's easier just to put _everything_ on SSL and avoid th

> HTTPS end to end isn't really worth it for some things. Don't agree. Serving HTTPS is cheap now, and it's easier just to put _everything_ on SSL and avoid the mental effort of deciding what goes where.