HTTPS Now
Put in a actual, recognized SSL Certificate on the site, and setup redirects to run everything through that now.
Figured that was a reasonable thing to do because people are still occasionally downloading old software from this site, and the cert was free for the year (Gandi).
Hopefully by the time it expires the Let's Encrypt service will be up and running.