&gt; Seriously this. I don&#x27;t see why encryption and website verification have been wrapped up in the same thing (SSL certs). They&#x27;re two different things. Encryption should be free, automatic and default.<p>Becuase you either have to do DH and all of the key negotiation anyway (at which point you already have a key, so why not encrypt and HMAC at the same time?). If you had two systems for this, it would be pointlessly inefficient (why have two DH key exchanges for the same channel).