[sarif]

You're kidding right? Its 2018, there is no reason to not use https these days. With lets encrypt its not like its costing you anything.

[diegoperini]

There can be some reasons. Assume you have a site/blog hosted by a service provider like Wordpress, Medium, Github.io, Blogger, Tumblr or some other local provider. It can be expected at least some of them don't support SSL certificates for custom domains.

[sarif]

time to get a new host then?

[icedchai]

Time is money. It takes time to set it up.

[synotna]

So does showering, and you do that before interacting with people outside right?

[sarif]

damn, I should do what you do for a living if five whole minutes costs that much.

[icedchai]

It's easy for people like us to set it up. I've set up Letsencrypt many, many times.

Now, imagine you are Joe Blow hosting his blog on some small web host that barely supports Wordpress. Logging into CPanel is confusing to you. How do you deploy SSL?

[sarif]

that is a fair point.

[icedchai]

It looks like CPanel does support a letsencrypt plugin, which is really cool: https://blog.cpanel.com/announcing-cpanel-whms-official-lets...

However, I have to wonder how many hosts actually enable it...