I love the creativity and historical value of the open web, but I don’t get this anti-HTTPS stance. These days, it is easy for site administrators to upgrade to HTTPS without modifying their content.
Get a free certificate from Let’s Encrypt, set up redirects, and then add the Strict-Transport-Security header to further secure the site and reduce network traffic from the redirects.
Your only new external dependency there is Let’s Encrypt, which is run by a non-profit. And if you’re ever unhappy with them, you can always switch to another provider and most people won’t even notice.
Get a free certificate from Let’s Encrypt, set up redirects, and then add the Strict-Transport-Security header to further secure the site and reduce network traffic from the redirects.
Your only new external dependency there is Let’s Encrypt, which is run by a non-profit. And if you’re ever unhappy with them, you can always switch to another provider and most people won’t even notice.