[forgotmypw17]

This, a thousand times. No one is going to mitm someone browsing my text blog. On the other hand, https creates many barriers to access, including recent version requirement, time sync, and extra cpu and bandwidth.

[tpxl]

ISPs regularly MITM http websites to inject ads (in the US even).

[forgotmypw17]

It happens. I think I'd rather my site be served with ads, than not at all.

It would be great if we could always automatically choose the right option, but browsers don't do that.

[tpxl]

Ads aren't that much of a problem, but serving cryptominers/phishing websites/viruses is a real issue.

[forgotmypw17]

Do ISPs really do that?

[tpxl]

I haven't heard of it, but other malicious actors surely do.

[cutler]

Not to mention single points of failure like Letsencrypt.