All WordPress.com blogs are encrypted now

[Harold Mansfield]

WordPress.com has supported encryption (https://en.blog.wordpress.com/2014/06/05/reset-the-net/) for sites using WordPress.com subdomains (like https://barry.wordpress.com/) since 2014. Our latest efforts now expand encryption to the million-plus custom domains (like automattic.com (https://automattic.com/)) hosted on WordPress.com.


Today we are excited to announce free HTTPS for all custom domains hosted on WordPress.com. This brings the security and performance of modern encryption to every blog and website we host.

To be clear, this is for websites and blogs on WordPress.com. Not self hosted WordPress. If you're running self hosted WordPress, you still have to do it yourself.

https://en.blog.wordpress.com/2016/04/08/https-everywhere-encryption-for-all-wordpress-com-sites/

[vangogh]

Even if it's only for WordPress.com it's still a good thing. It's good to see big companies taking security and encryption seriously. The issue is going to keep coming over the next few years and beyond.

[Owen]

Good. I don't personally use Wordpress.com, I use Tumblr for my blog, though I do think Tumblr does the same. Good for WP :D

[Harold Mansfield]

What I really like is that post Apple/FBI that companies are just encrypting on their own. Not waiting for the courts to decide anything...which is futile anyway.