[toomanybeersies]

The entire internet was built on the assumption of good actors and until recently non-secure protocols & models were the default.

Only in the past decade has there been serious consideration for encryption and security on the internet.

Before Let's Encrypt was launched in 2014, HTTPS was the exception, rather than the norm. It was only in 2016 that greater than 50% of internet traffic was encrypted.

Secure DNS is still very much a work in progress.

BGP was built with the assumption of good actors, and doesn't include any security mechanisms.

Email still doesn't have any good options for E2E encryption.