HTTP/2.0 is working on encrypting everything though NSA shills have managed to derail the working group by proposing "trusted proxies" that are allowed to decrypt traffic for nonsense optimization reasons.