> But most of the websites today are not sending sensitive data back and forth, they are simply sending public data from public websites.

I disagree. Most websites include some sort of login system, at least for the editors to use (e.g. Wordpress). And the few that don't, often include data that doesn't need to be private, but should be signed (e.g. GPG key fingerprints).