My blog, http://scripting.com , is not “not secure.” It uses the standard protocol of the web, HTTP. It will not hurt you.

HTTPS has nothing to do with whether his blog is secure. It has everything to do with whether a visitor's connection to the blog is secure. If the connection is not secure, then it doesn't matter how secure the blog itself is, anyone that can intercept the connection can do dangerous stuff. Without HTTPS, you actually have no control over what your visitors actually get served when they visit your site. (HTTPS doesn't fix every ill either, but it is a big step in the right direction.)