Information, Technology, Security, and other stuff.
I just enabled HTTPS on my blog.
But rather than pay the ~$50/year cost of an SSL certificate, I instead opted to just use a self-signed certificate.
As somebody who works in the field of PKI, this would almost be blasphemy, but I did this for 3 reasons:
I can revoke the certificate any time, simply by removing trust.
PKI is designed to allow others to trust me via some trusted authority, and vice-versa. In this instance I am the trusted authority, and after all, I'm simply just trying to ensure my connection is private for authentication purposes, and I don't need others to have trust.
I may purchase a certificate in the future, simply to allow for protecting my external content from manipulation, but I don't really see that as a threat at this stage.