For several years I see that Google, Facebook, etc start serving (and even redirect to) content via HTTPS.
Serving sites that prompts passwords in insecure HTTP was wrong even in 1999 but it considered acceptable even in 2010.
But nowadays even public pages (like queries from Bing/Google) is served via HTTPS.
What events caused mass migration to HTTPS? Wikileaks scandal, US / EU law enforcement, reduced cost of SSL/TSL handshake with generally dropped cost of server time, growing up IT culture level in management?
Even public efforts like https://letsencrypt.org/ started not so long ago...
@briantist As I also maintain hobby sites and interested in cheap/effortless SSL/TLS solution. For VPS (which starts from 5$/month) I recently evaluated Let's encrypt with
certbot (other bots available) in
webroot operation mode. This provides me with valid SAN certificate for 3 month (and it is in
cron job - renewal performed a month before expiration date):
certbot certonly -n --expand --webroot \ -w /srv/www/base/ -d example.com \ -w /srv/www/blog/ -d blog.example.com