In reply to Bright Joe.

Yes, that was a helpful reply. Thank you for that.

I have to agree with Bright Joe here. There is no intrinsic need for a security certificate from a Certificate Authority (CA) on a website that is simply a blog, especially if it is just plain HTML... without any data capture.

If you are really concerned about security, use a VPN and not rely on SSL. There is a bit of overhead to it, but it is about as secure as you can get. Of course, bank/financial and medical, and similar sites that collect personal info should be protected... and I can't think of one that isn't these days (making a VPN somewhat redundant.)

No one has explained to me why Google is on the road to requiring Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL) for every website... but I have to surmise that there is a dollar sign behind their motivation somewhere. Do they own a CA somewhere?

There is no doubt that the Comodo's of the world will cash in!