title: Why not use HTTPS for everything?
body: <p>If I was setting up a server, and had the SSL certificate(s), why wouldn't I use HTTPS for the entire site instead of just for purchases/logins? I would think it would make more sense just to encrypt the entire site, and protect the user entirely. It would prevent problems such as deciding what has to be secured because everything would be, and it's not really an inconvenience to the user.</p>
  
  <p>If I was already using an HTTPS for part of the site, why wouldn't I want to use it for the entire site?</p>
  
  <p>This is a related question: <a href="https://stackoverflow.com/questions/1361531/why-is-https-only-used-for-login">Why is https only used for login?</a>, but the answers are not satisfactory. The answers assume you've not been able to apply https to the entire site.</p>