[berbec]

Great idea. No HTTPS?

[TruthSHIFT]

I feel ignorant about this. Why would this site need HTTPS?

[kodablah]

Put concisely, so nobody can inject content in-transit.

[bnav6]

Use an ISP that you can trust.

[lghh]

For most of us in the US, that isn't an option. Also, your ISP isn't the only point of attack for injections.

[Bedon292]

Search engines and browsers are quickly headed towards essentially requiring HTTPS. So probably want it from that stand point.

And, first thing I can think of is affiliate links. The site is all affiliate links, but I can just MITM it and just sub in my own number and get credit.

[yesenadam]

ngate's Discourse on HTTPS. I don't know how accurate it is, but it's a good read!

http://n-gate.com/software/2017/07/12/0/

[icebraining]

Doesn't seem factually inaccurate, it's essentially saying "not my problem". I assume the incompetence accusation on LE is due to https://news.ycombinator.com/item?id=11881704.