Let's hope WP becomes a trend-setter among news websites in this direction. The only other one (that I know of) is RT. SSLLabs grades WP's HTTPS support "A" [1

Let's hope WP becomes a trend-setter among news websites in this direction. The only other one (that I know of) is RT. SSLLabs grades WP's HTTPS support "A" [1]. I can see that they don't set HSTS headers and there's no OCSP stapling. Also, their cookies are not set as "secure". [1] - https://www.ssllabs.com/ssltest/analyze.html?d=www.washingtonpost.com&s=192.33.31.56&hideResults=on https://www.ssllabs.com/ssltest/analyze.html?d=www.washingto...