Iโm trying to figure out Mozillaโs reasoning for attempting to move to SSL everywhere.
I donโt buy their justification that it is to make users more secure. This is only a marginal concern for them I believe.
My guess is that since SSL and setting it up is rather difficult (and impossible for the average user) that itโs a covert attempt to make it harder for non-advanced users to avoid cloud services and large corporations. Itโs an effort to push more people into NSA-friendly data centers and cloud โsolutions.โ
Having wasted too much of my life on dealing with SSL and its issues as an IT professional, I can tell you that the average user stands no chance of configuring it correctly.
So they wonโt bother.
Not everything needs to be encrypted. It often offers no benefit and only additional complexity and compute overhead (and itโs therefore slower), but like IPv6 itโs something pushed by clueless engineeritis infectees despite being the wrong solution to an irrelevant problem. In most cases, anyway.
One of the benefits of the web โ and what caused it to grow so explosively โ was its openness and just how easy it was.
Requiring HTTPS everywhere is yet another step in the long path to destroy all that.
The Web will be just like television. Google demoting HTTP in search results will kill off what’s left of noncommercial content.