Https is among the most broken ideas in the history of CS. I remember the first time I really learned about it and I went like it can't be this stupid.
Most Internet traffic today between A and B is decrypted by C because of this.
Most Internet traffic today between A and B is decrypted by C because of this.
HTTPS and transport security isn’t a broken idea.
Standardized content security has been tried in many contexts and has typically been even less secure unless it’s for long lived opaque media, like S/MIME for emails. Structured data like XML security has been abysmal.