Blocking http means forcing others to subscribe to the PKI model (unless of course self signed certificates become much easier to add and use and not scary, in which case HTTPS is fine), which is neither foolproof nor end-all-solution.