After reading both the linked article and the original to which this responds, I can say I am one of those Crypto zaelots. And not just because I am developing a protocol that encrypts everything end-to-end.<p>The original article's claims are ludicrous, stating that TLS 1.3 would be basically unlawful, since the ISPs can not read the data. Than it says that a open internet is bad, citing small, empty pages that go from "there are nazis there" to "this and that political figure is there only thanks to the internet".<p>The solution is: middleboxes that see all your traffic. ...'cause Trump would not have been elected with your middleboxes or something? That alone is disturbing on many levels.<p>The author of the linked article points out that it is a bad idea due to what Snowden brought up, but basically stops there.<p>So please let me say, fuck you and your middleboxes. But not only because of the Snowden revelations.<p>I have seen middleboxes truncate traffic because they didn't understand a TCP option. Throttle/drop everything because they were way too downsized and could not handle the traffic, some barely able to NAT, let alone do their inspection. Centralized firewalls crashing due to too many packets in memory. Captive portals that spoof dns so that they can display the login page, except that I can't see that, 'cause HSTS and they don't have the certificate, or my device caches the DNS query result and I can't see that site anymore.<p>So Fuck you and your middleboxes. Especially those that intercept all your TLS traffic, analyze and then pass it through, signed with their CA. Except they didn't really control the original certificate, or you can't control the trusted CAs. Or those that blocked me from updating antiviruses, because guess what, false positives. Or those that MITM your dns queries, to give you your much needed advertisement, when they don't outright MITM your HTTP to add <i>their</i> advertisement.<p>Are any of those middleboxes ever updated anyway? By the developers, not by the local admins. Those middleboxes that break stuff and make troubleshooting hell. I have seen too many old, never-updated stuff to believe in your middleboxes anymore.<p>If a company wants/needs to see/modify the traffic, then fine. On their devices. Install a CA there or install a VPN that tunnels the device to your proxy or something. Why does it have to transparent, for everyone?<p>So really, I'm with the author. Fuck you and your fucking middleboxes.