I gave a talk last Wednesday at the Chrome Dev Summit about how TLS and HTTPS are not the big performance problem that people often think they are. You can have security and performance, and in fact security enables the new, performant application protocol HTTP/2.
It was fun, and was chuffed to find that many or even most people were on board with the basic idea that they do in fact need to transport their apps over HTTPS. At last?
My safety-loving colleagues Adrienne Porter-Felt and Alex Russell also gave excellent talks earlier in the morning. This YouTube video has them all.