This blog is now being served via https-only. If you’re still not using https: It’s really easy to switch and you don’t need to buy a certificate anymore. Using Let’s Encrypt, this is what I typed on my server (aside from a few additional “yes” and <Enter>):
git clone https://github.com/certbot/certbot
That’s all. Blog up and running. Do it!