I know the reasons for ‘HTTPS everywhere’ , but making everyone use it feels like a fundamental failure of the web. It makes setting up a website far more complicated, and contingent on a third party getting a lot of stuff right forever. Even LetsEncrypt is corporately sponsored.