As a matter of policy can HN please not accept submissions with non-https URLs?

It's a checkbox at most web hosts, built in to many reverse proxies, etc. There's no excuse for not offering htttps, particularly since it places users at risk if at any point along the path between them and you, there's someone untrustworthy.

> places users at risk

Help me out here, what's the threat model here while reading troll programming blogs?

One would argue that if you're that much at risk and still find time to click non-https-blog-posts the issue is in front of the screen, not in the connection