This was a long-standing task of mine, but has finally been completed.
While I was using HTTPS for all sensitive pages like Payment, My Account, Login, and the API, everything else was served on HTTP.
This was to preserve the hostname
www for secure pages (since that’s what my SSL Certificate is for) and use the cleaner
nsscreencast.com for content. It was important for SEO reasons to have code in place that redirects you to the right canonical url for each episode so there aren’t 2 valid URLs for the same piece of content.
Now that the root domain is secured, I can get rid of www URLS entirely, and remove all that redirect code. Good riddance!
If you noticed anything not working, please let me know. And for those of you who use the HTTPS Everywhere plugin in Chrome (you know who you are) you can start using the site in Chrome again .