Migrated my site over to being SSL-only. And, thanks to Let’s Encrypt which offers free domain validated SSL certificates, it didn’t cost me a thing.
Of course, rolling out SSL isn’t all I did. I also enabled HTTP/2, and the usual recommended configuration hardening. Why do this? It prevents man in the middle attacks. And, SSL is a requirement for HTTP/2, which virtually eliminates the performance penalty of using SSL.
But, don’t take my word for it. Check out the Let’s Encrypt website, and read up on HTTP/2. It’ll only cost you a bit of time, and you too might see the benefits.