[lxgr]

> Do we also need to put all our letters into strongboxes before we send them?

If it were as cheap and efficient as TLS these days, yes, absolutely

> Maybe we should have solve the ISP snooping problem by making that illegal instead.

We could do both! ISP snooping is still a problem for metadata (SNI).

[account42]

Apparently the cost of TLS these days is to subject yourself to whatever laws that countries of "free" TLS want to impose on you. That isn't very cheap.

[lxgr]

I'd also love TOFU for TLS, at least on .local TLDs, but for publicly hosted websites, I've come around to the idea that maybe encryption without authentication would not help that much these days.

As for who does that authentication: Given all the suggestions in the sibling threads, I really don't think we're in a situation where there's a single entity gatekeeping access by any means.