The quotes are getting very long, so I'm just going to respond directly to points without quoting here. You seem to be oversimplifying the notion of "privacy"

The quotes are getting very long, so I'm just going to respond directly to points without quoting here. You seem to be oversimplifying the notion of "privacy" to "stuff like bank details". That is incorrect. Any kind of browsing data that a user does not want exposed to third parties falls under this banner. For some that's just their bank details, for others that's every single site they visit. The point is that you can't decide for other people what is "private" to them. Therefore, the only acceptable solution is to make privacy opt-out - and that is done by encrypting everything by default. Asset caching depends heavily on the site, and on whether different pages use unique assets. A cache is not a security feature, was not designed as such, and should not be treated as such. Yes, you can tunnel TLS over Tor. It doesn't afford you any additional confidentiality. Your domains are still being leaked, just in a different place - and routing everything over Tor still exposes you to the same traffic correlation issues, just now it's domains that are being correlated rather than all request/response data. Making TLS more secure entails removing the requirement of 'trust' as much as possible. That does not necessarily translate to it being harder to obtain certificates. A good example of this are hidden services - it's trivial to obtain an .onion identifier, yet since it's self-authenticating, it does not require trusting a third party. The real problem with your argument shows itself in your very last paragraph - "Personally, I don't care [...]". You are extending your own personal point of view to everybody else on the internet, and it doesn't work that way. Others will have different privacy requirements, and those should be accomodated to. Just because you don't care, that doesn't mean you get to decide that nobody else cares either. EDIT: Also, just to emphasize this: I am not arguing that encryption should be forced. I'm arguing that it should be default. That is something very different.