This blog is now being served via https-only. If you’re still not using https: It’s really easy to switch and you don’t need to buy a certificate anymore. Using Let’s Encrypt, this is what I typed on my server (aside from a few additional “yes” and <Enter>):

git clone
cd certbot
./certbot-auto –apache

That’s all. Blog up and running. Do it!