> Regardless of Google's move, there is no excuse for any site not to be served encrypted anymore. Honest question: are you willing to indemnify your users whe

> Regardless of Google's move, there is no excuse for any site not to be served encrypted anymore. Honest question: are you willing to indemnify your users when the next Heartbleed-like attack comes out for the underlying SSL library you are using in your product? If you are willing to do that, and will offer me a no-cost wildcard domain certificate, I will switch to your product and start using HTTPS.