Without HTTPS, any MitM could inject ads, malware, or simply manipulate any content on your blog. TLS isn&#x27;t just useful to encrypt private data, it also makes sure what you see is what the site owner wanted you to see. With http&#x2F;2, the overhead is minimal and with TLS 1.3 it might soon be gone completely (since it&#x27;s probably going to add a mode that avoids multiple round trips for the initial TLS handshake; encryption itself isn&#x27;t really an issue nowadays with AES-NI, etc.)