HTTPS Encryption via letsencrypt

[Dan]

The real value in serving pages via HTTPS is that browsers will show the friendly padlock in the address bar, not the scary "Not secure" warning. Also, Firefox displays a warning when logging in via HTTP.

[Dick]

I'd also add a request to move away from the Google APIs, if possible. They're certainly no friends to privacy or being apolitical. In the meantime, I just have Privacy Badger blocking both them and the Facebook tracker.

Also remove the "Share" and "Tweet" buttons from posts.

[Astraea]

I agree that HTTPS benefits any website. That said, always make sure your personal measures make up for any deficiencies on the web. Use single or double VPN, anonymous email accounts and rotate your login credentials (making a new login account every x months on forums for example).

[Dragovorn]

Even the missing certs aside, someone needs to have a close look at just how talkative the server is right now.
This project will make quite a few people mad, so close attention to best practices is needed but as of now sorely lacking.

I mentioned something similar in one of my other points, right now the name servers being used are very back-traceable to his day job (I got as far as a LinkedIn page when digging) and that could spark trouble for somebody trying to keep his passion from affecting his work-life (and potential clientele)

[Tom]

My sub under everything that's been said and mentioned so far. The privacy is crucial for escapism.

[Yoshi]

I'd also add a request to move away from the Google APIs, if possible. They're certainly no friends to privacy or being apolitical. In the meantime, I just have Privacy Badger blocking both them and the Facebook tracker.

[Ned Ludonarrative]

Echoing this. I tried manually swapping to https mode and it couldn't even load the css for some weird reason.

[ASCII]

Even the missing certs aside, someone needs to have a close look at just how talkative the server is right now.
This project will make quite a few people mad, so close attention to best practices is needed but as of now sorely lacking.

[amnesia]

^ What this guy said, https is needed.