@Seirdy @tdarb But wouldn't it be more helpful to teach people to disable javascript by default, as that would also help against so much spying that goes on with perfectly good https certificates? And then teach people to know the difference between http and https? That would help meaningful privacy a lot better than forcing https on everyone. See also http://blog.tfiu.de/foced-https-redirects-considered-harmful.html