There are ways to make the Internet much more secure than it is today, and implement them <i>tomorrow</i>, with existing protocols and encryption methods. It's just a matter of browser vendors, hosting companies and websites agreeing to do it.<p>That being said, I hope IETF starts working on a new highly secure Transport layer protocol to replace TCP, within the next 5 years, and I hope they use Dan Bernstein's CurveCP [1] for inspiration.<p>We need the Internet encrypted and secure <i>by default</i>, and I don't care what Google or other advertising companies have to say about it. Adapt or die. Security of the web and the protection of the human right to privacy is way, way more important in my book. If they choose to fight such a move, instead of adapting and actually supporting it, then they will have become the <i>enemy</i>, and they'll end up on the wrong side of history.<p>So IETF's goal should be to get everyone to switch to these more secure, already existing protocols, and implement them within a year, or two at most.<p>In the meantime work on replacing TCP within the next 5 years, and also think about ways to create a new secure-by-default and easy to implement, IP-level protocol, to be used within 10-15 years.<p>If we are to "take the Internet back", then it needs to stop being such an easy tool for mass surveillance, so in a way, we need to replace all of its insecure parts.<p>[1] - <a href="http://curvecp.org/" rel="nofollow">http://curvecp.org/</a>