Now that I’ve had a few months’ experience with Let’s Encrypt, and I have cert renewals completely automated, bobcopeland.com is now fully https and serving HSTS headers. I’m now using acme-tiny to renew the certs, thanks to their dedication to making the code easily auditable.