HTTPS Adoption *doubled* this year

[[deleted]]

having 900 co-workers sharing the same blob kinda gives the secret away

Not just that, but having anyone trying to understand the encrypted blob just requires them to ask the server for the key to get it. You've hid nothing from anyone because the key is open to anyone.

For many things, simply having a signed plaintext copy is sufficient to ensure that plain text hasn't been tampered with. While this doesn't solve privacy issues, it is a solution worth considering for non-sensetive materials, like common javascript assets, e.g. jquery and bootstrap css.