Repressive governments somehow convincing all CAs worldwide to refuse to issue certificates for your domain is a pretty distant hypothetical.  Repressive governments monitoring and altering unencrypted communications in very sophisticated ways is a reality today.  It&#x27;s not a freedom&#x2F;security tradeoff but a freedom&#x2F;freedom tradeoff.<p>Not to mention that, of course, access to most websites is already gated by a central group of authorities - the domain registries - which can and do seize domains.  Using raw IPs is one alternative, but if you&#x27;re in that kind of position, chances are you want to be a Tor hidden service anyway.