Does my site need HTTPS?

I still find it slightly nebulous what exactly the condition is that a DV certificate is proving. In practice, it's that at the time of the challenge, the DNS entry (as observed from one or more secret locations on the internet) is under the requester's control.

But couldn't this be archived a lot simpler by having the registrar also be the CA and automatically generate a cert when I update the DNS? Why do we even need separate CAs at all still?

I’d like to see a way to serve up a page to very old browsers that don’t support TLS while giving modern browsers the latest TLS cyphers.