Really, it's the browsers' faults to conflating the variously-tangentially-related concepts of entity identity, domain ownership, and connection encryption.