Security theater

So what exactly is the point of running HTTP over SSL (HTTPS) on a fully fire-walled, nobody-cares-about-your-traffic, vanilla version control service? Because, right now, I think the whole point is to waste a day sweeping up after the fallout of replacing an expired cert and massaging the egos of all of the butthurt jackwagons who feel as if they’ve been personally assaulted because they’ve encountered a warning in the middle of their Friday.