I was quickly wondering, why don't ISPs offer encryption for the traffic from the customer's router to the ISP-server?
Until now, if you want to protect against e.g a MitM-attack you solely rely on TLS, a VPN, or an encrypted proxy-network like Tor. Encryption from the ISP would offer a big extra layer of security.
How could it work?
For example, the ISP sends a new generated key to the routers every day. This key is encrypted using an algorithm which does calculations on vectors like time, and/or a pattern (similar to product keys). The algorithm to decrypt this key is hard-coded in the routers. Now, the routers have a new key each day, and that key can be used to encrypt the connection from router -> ISP.
Of course to hide info for your ISP, you'd still have to use a VPN or Tor. Yet this would be an extra layer of security.
Why aren't ISPs doing this?