For a year or so I’ve been running a Chrome extension I wrote, which tracks which origins my Chrome makes the most http:// requests to, in an effort to make my https:// advocacy more data driven. Websites that top this list are disrespectful of my privacy and show no regard for whether bytes make their way to me unmodified. Over the past year, I’ve seen several websites that used to top this list migrate to https://, for example Amazon, Netflix, and the Washington Post.
