The blog for which you speak needs HTTPS too, as there's no way to guarantee the site hasn't been modified in-transit otherwise.

Injecting ads, changing content. All possible when the content isn't encrypted end-to-end.