&gt; Regardless of Google&#x27;s move, there is no excuse for any site not to be served encrypted anymore.<p>Honest question: are you willing to indemnify your users when the next Heartbleed-like attack comes out for the underlying SSL library you are using in your product?<p>If you are willing to do that, and will offer me a no-cost wildcard domain certificate, I will switch to your product and start using HTTPS.