I'm not making a broad recommendation, expect maybe to slow down a bit :) It sounds like you have lots of usecases for applications that need protection agains

I'm not making a broad recommendation, expect maybe to slow down a bit :) It sounds like you have lots of usecases for applications that need protection against injection , MITM, or eavesdropping. It's great that you understand that. Those sites and apps need that protection, and the network protocols are one place to look for it. Also, there is a huge difference between "all web software should support encryption" and "turn all of that on by default". I just want a broader discussion of the costs and more discussion about the problems people are trying to solve. Thanks!