That&#x27;s a good point, domain registrars like GoDaddy generally don&#x27;t make much on domains alone and focus on selling additional services like hosting packets (and SSL), where they probably make most of their money.<p>However, most browser vendors are already making plans to phase out HTTP without TLS by only providing new features&#x2F;APIs to HTTPS  sites (and eventually by displaying <a href="http:&#x2F;&#x2F;" rel="nofollow">http:&#x2F;&#x2F;</a> as insecure in the UI).<p>I think in the end this will force shared hosting providers to include domain-validated certificates (from e.g. letsencrypt) in their base packages for free. Instead, they would probably push OV and EV certs to make up for any revenue loss.