All good points. I'm not trying to say one improvement is more important than the rest. I support their initiative too, but we have evidence of their compatrio

All good points. I'm not trying to say one improvement is more important than the rest. I support their initiative too, but we have evidence of their compatriots performing MITM attacks as well so this is a multifaceted problem. https://www.schneier.com/blog/archives/2013/09/new_nsa_leak_sh.html https://www.schneier.com/blog/archives/2013/09/new_nsa_leak_... Also it is aggravating to me that the cost of implementing SSL on a single site is too high because of the CA signing cartel. In my experience this is the main reason that many sites eschew the matter altogether. We're creating a digital security ghetto like this, and it is completely unnecessary. This is one area where government has the capability to lead the way at a very low cost, which is all I was trying to say, perhaps with a bit too much snark.