Expecting the user to have a browser that supports a recent version of TLS is not unreasonable. My point was that even browsers older then most people imagine support HTTPS, but like you said something newer then Netscape would be required. If the argument being made though is we shouldn't require HTTPS to support users that use clients which don't support HTTPS, my question is still the same, what users and what clients?