Encrypting sensitive user data is only one advantage of TLS. Without TLS, every single network hop between you and your client could modify your site. This coul

Encrypting sensitive user data is only one advantage of TLS. Without TLS, every single network hop between you and your client could modify your site. This could mean altering the content, adding ads or even malware. Some large ISPs have done so in the past. Furthermore, browsers vendors have decided that HTTPS is the way to go forward and will gradually mark HTTP-only sites as unsafe. New browser APIs might only be available in secure contexts. You might be interested in this list of web hosts that support Let's Encrypt[1]. Generally speaking, your hoster should be able to provide a one-click interface for obtaining and installing a certificate for you, and odds are most hosts will eventually do so free of charge once HTTPS becomes mandatory. [1]: https://github.com/letsencrypt/letsencrypt/wiki/Web-Hosting-Supporting-LE https://github.com/letsencrypt/letsencrypt/wiki/Web-Hosting-...