HTTPS Everywhere?

2026-09-12 HTTPS Everywhere? I have encountered people who seem to think that its sane to blindly apply TLS to every single situation, and that it doesn't really require any more thought than that. Like why wouldn't you? Traditionally (I'm talking circa 2000), there were two main barriers that kept us from using HTTPS by default everywhere; buying certificates was expensive, and it could consume many IP addresses which were expensive. A third category was that encrypting sessions was computationally difficult, so again, expensive. With the founding of Let's Encrypt and the development of the ACME protocol, getting and keeping trustworthy certificates on your servers is a solved problem. We all owe a debt of gratitude to everyone that made that possible, otherwise, enough said. The high level of IP address consumption was solved by the introduction of Server Name Indication (SNI). Having many websites being served from the one server wasn't easy. You either had to encrypt the traffic…