You seem to have way overreacted to my post. I'm aware of most of the concerns you raised and my opinion is the same.

It is not true that TLS only works if both sides have a certificate. There are many instances when it is useful to authenticate a server, but the client remains anonymous (with regard to the authentication at least, of course there's IP addresses and fingerprinting etc).

It does not break TLS to use it in this way to shop. It provides some level of assurance that you are directly connected to the business you think you're connecting to and that you can give them credit card information or whatever other information securely.

DNS is not secure, true, but for users who know to expect a TLS connection, they will know something went wrong. And if the server uses strict transport security, the browser will refuse to connect to the spoofed site. And I wasn't suggesting that TLS hid what site you were visiting, only what pages you visit within a domain.

I used the wrong word when I said "false information" before, I meant integrity, right. Obviously the source may not be trustworthy either, but if you go to nsa.gov to get a document published by the NSA, it's good to know someone else hasn't slipped in some maliciously modified replacement.

What I'm suggesting is relatively trivial is correctly configuring a TLS server not to use 56-bit ciphers and 512-bit RSA. Yes total cyber security is difficult to the point of virtual impossibility, my point is only that having a reasonably secure website with well configured HTTPS is not something to worry about how much tax money is spent on, it won't be that much. And there are government websites where people do submit information and have a greater security need than sites which are just there to read, so the government needs to be capable of doing this anyway, and applying the same secure configuration to read-only servers is not such a great marginal cost.

In fact there's a lot of inconsistency in the security configurations of government websites. If the NSA cared at all about defense, they could work out some standard software configuration for government servers. If anyone has the resources to do it right, they do, but unfortunately their priorities seem to be with breaking everything instead.