So if I understand this right, Tim&#x27;s main issue is that &quot;s&quot; is just going to lead users to think &quot;oh, it&#x27;s secure, I&#x27;m good right?&quot; when really web security is a continuum, even on the level of certs - the browser doesn&#x27;t meaningfully differentiate between domain validation, identity validation, and extended validation (EV), and less so on the technical characteristics of the cert (signing algo, ciphers chosen, etc.)<p>It&#x27;s not that encryption is bad, it&#x27;s that the https method encourages lazy thinking.<p>Call me pessimist, but I think that any method which relies on &quot;user education&quot; is doomed from the start. Any UX designer can tell you that users <i>do not read error messages</i> and just click by them ASAP to get back to what they were doing before the computer so rudely interrupted them.