IMO this feature should be oriented to sysadmins not just developers. Is there really added value for developers to use HTTPS or HTTPS/2?
Yeah, server push is an example, we have an API where you can push resources to the client before they are requested. Although we have a learning handler that can try to do it for you, but thats not as good as something designed for it. It also has different characteristics that you can exploit (e.g. being able to create a lot of streams without impacting connection count) that you might want to do if you are building an HTTP/2 centric application. Of course, not everyone will fall into this category because they will need to support both h2 and h1.
It should be easy for sysadmins to setup TLS/SSL with "production" quality, from the gereration of the CSR that has to be send to the CA to the generation of the keystone.
Agreed. What Stuart meant was that out of the box auto-generation was a development focused feature. Obviously in production you don’t need /want keys automatically generated, you want to use your publicly signed cert.