I'm not arguing for replacing existing uses of HTTPS here, just cases where you would today use self-signed certificates or plaintext.