Maybe they will use Let's encrypt's SSL once it's ready...