In addition, new privacy features such as HSTS and DNS over https, ESNI, etc degrade what control you had even further stopping you from even knowing what data gets out of your network and when.
In addition, new privacy features such as HSTS and DNS over https, ESNI, etc degrade what control you had even further stopping you from even knowing what data gets out of your network and when.
Inspecting these, on a machine you control, is still 100% possible – I do it all the time.
Are you proposing we should go back to plain HTTP and DNS just to make tinkering easier? I'd argue that that would come at the expense of the vast majority of users.
There are multiple threat models, and having different options helps in different situations.
It's also not realistic for me to try to figure out what's going on inside an SSL or TLS library.
I'm OK with TLS being the default, but I believe in always providing a plaintext option.
TLS also introduces compatibility and accessibility issues. With regards to GPC specifically, requiring TLS cuts off access for a huge population of about 20 years' worth of older devices which work fine otherwise.
There are many, many situations where plaintext ability has allowed me to access my own resource where requiring TLS would have caused it to fail, and I'm certain there are many more which I cannot even anticipate ahead of time.