The idea here is to force infrastructure providers (hosts, especially) to provide customers with free certs, by default, so that *everything* is encrypted. The web should have been HTTPS-only from the start, we can see in hindsight.
-
It’s really a shame that absolutely terrible practices like Comcast’s are driving us to encrypt inane traffic to avoid tampering. There is otherwise very little technical or business justification for needing to encrypt someone’s personal blog for example.
