Hi, I just registered on the site, and what struck me was that there isn't an SSL certificate installed. These can be obtained for free from letsencrypt and installed very easily using certbot. Is this something that was considered?

but ... botb HAS https

Oh... Search engines and email communication uses HTTP. Perhaps it would be a good idea to force redirect to HTTPS?

it was discussed in the past when it was added, but some people use machines and browsers that doesnt support https afair, thats why it was made optional. not sure if thats still the case, so mayb a redirect to https always would be useful.

I can't think of a machine/browser combo that doesn't support SSL nowadays. I think for security reasons it should be enforced, imho.

some people are still using xp to interact with botb :shrug:
it's on my todo list to work on the situation more

Thanks for the explaination puke7!