Deprecating Non-Secure HTTP
I should be happy about this -- who wouldn't want the entire web to be encrypted -- but SSL is so broken for normal people. SSL is expensive (wildcard certificates run $70 a year and up), confusing (how does one pick between the 200 different companies selling certificates?), and incredibly difficult to set up (what order should I cat the certificate pieces in again?).If SSL doesn't change, this move will cut the little folks out of the internet. What are Mozilla's values?