Why don't they mention HSTS? Seriously a very important safeguard against HTTPS stripping.
Apart from that, my idea of what every web dev should know about HTTPS is use HTTPS for everything. The performance reduction is minimal and far less important than the security gain...