Private By Default Tim Bray suggests that every site should use HTTPS and explains the ins and outs of making it happen.