In reply to Weston Ruter.

So the idea is to force HTTPS on everyone if this feature plugin transits to core?

SSL / TLS in itself is NOT secure, if you don't secure the other two points of "interest", ie. client (= your local system) and, much more important, server. IMHO this is all a somewhat false-flag operation, because everyone non-deeply involved - and even then - is now thinking: "SSL makes everything secure!" - which of corpse is WRONG. If you don't update your WP install, keep your server software up-to-date OR secure, then no matter how much strong SSL encryption you throw around, your site is still destined to be hacked and abused as eg. trojan horse malware hole in the end.

cu, w0lf.