Oooh, Let’s Encrypt seem to be ready to go live Real Soon Now™. I’m looking forward to it – hopefully this means we can get rid of those last few http:// urls (and hopefully I can move my own certificates away from StartCom).
In more security-related news, CentOS just updated OpenSSL to mitigate the recent DH weakness.