Who claims that you can't have a passively secured transport without authentication? I mean, SSL/TLS itself uses DH key exchange, which can be used for that purpose.
The problem is having secured transport against active attacks as well, and without forcing the user to know anything about the site besides its domain.
