>Maybe you're arguing that it would be better to have an insecure but encrypted mode in all browsers? Pretty sure this is what we're doing today with smtps. We

>Maybe you're arguing that it would be better to have an insecure but encrypted mode in all browsers? Pretty sure this is what we're doing today with smtps. We just wrap smtp in tls and call it a day. Its dangerous and allows for mitm attacks. I think there was a paper recently about how this is already being abused. I just dont see where people who believe in self-signed certs as a solution to all our encryption woes are coming from. Its historically and technically has shown itself to be a security nightmare for most use cases. I think people like this are more political than practical and think they can do non-trivial things without regulation, authorities, etc. Sorry, but that's just not how this world works.