I’ve looked into it, and it just isn’t worth the expense and complications.
I’ve followed Dave Winer’s blog for a while now, through RSS, but I’ve only recently realized he (intentionally) doesn’t use https.
I totally agree it’s not necessary for something read-only like a blog, but what about blogs with comment systems? And this was written in 2015 after all. By today’s standards, it would be more trouble not to use https, you know?