[Zoepfli]

In the switch to https everywhere, we have barely started. For every HN and wikipedia with https there are 20 websites without (and whether the ones that do https do really secure https is yet another question).

Somebody should go through the top 10k websites and make a list, then repeat every few months.

[consultant23522]

Well, if you go by % of internet traffic Google is 40-50% of all internet traffic. You could probably get above 99% of all internet traffic with a shockingly small number of sites. While Google, for example, uses SSL it's not like your data is really secure from monitoring there.

[cpeterso]

Note that Wikipedia supports HTTPS, but it is not the default (yet).

[Zoepfli]

Funny, it is for me: any wikipedia page redirects to its https counterpart.

E.g. http://en.wikipedia.org/wiki/Hacker_News redirects to https://en.wikipedia.org/wiki/Hacker_News .

[makomk]

Do you have a user account at Wikipedia by any chance? They've been redirecting logged-in users to the SSL version for a while, and under some circumstances it also seems to redirect users who have been logged in but aren't right now.

[Zoepfli]

I do indeed have a WP account. It redirects as well when I'm logged out.

[StavrosK]

Are you using the HTTPS Everywhere extension, perhaps?

[Zoepfli]

No I'm not. I'd love to, but there is none for Safari as far as I'm aware of.

[teeja]

I think that somebody is the EFF. HTTPS-Everywhere (look to the bottom of the page to DL the latest .xmi) has a LOT (certainly hundreds) in their list ... with qualifiers noted.

https://www.eff.org/https-everywhere

[glazskunrukitis]

I understand that some time ago there were reasons behind not using https (price, setup, performance), but now you can get a certificate for few bucks[1].

[1] http://getssl/en/ssl-certificates

[ivanr]

FYI, in my research, about 10% of Alexa top 1 million sites support SSL. For the configuration of those 10%, see SSL Pulse https://www.trustworthyinternet.org/ssl-pulse/