What privacy? Your IP and the hostname of the website you&#x27;re connecting to isn&#x27;t encrypted over HTTPS anyway. The content isn&#x27;t sensitive and there&#x27;s no cookies on the site. The only remotely personal data would be your accept language header (which could be guessed from your IP) and user agent string (which you can just spoof anyway if you&#x27;re really that paranoid).<p>The MITM argument has more merit, but even there I can&#x27;t see it making much difference here given it&#x27;s niche appeal. Plus given it&#x27;s tech-savy bias, most people will be running a reasonably hardened system (latest patches, et al) anyway. Not the best argument against running TLS I&#x27;d admit; but still a point worth raising since the only argument for running HTTPS is to prevent malware injection.<p>Obviously in an ideal world everything would be served under TLS. But let&#x27;s be pragmatic about which sites we bully into switching.