Also, a slightly earlier take, briefly referenced within the above:
Opportunistic Encryption for HTTP URIs