I know, it's very hypocritical of me to tell people to use secure logins and not support HTTPS on this server, but worst case scenario is someone posts, edits or deletes comments on this website, as the blog entries are done elsewhere via a secure interface to the database. Now that I've successfully moved server, I will sort out HTTPS at some point when I'm less busy.