Its incredibly hard for publishers to do https, where main revenue is from serving third party content embedded inside.

Wired has nice article about their efforts going https https://www.wired.com/2016/04/wired-launching-https-security...

Nice article. Thanks, dbalan!

Huh? I'm connecting over HTTPS right now. Have you tried it?

When I try, I get a certificate that expired 5 months ago.

www.popsci.com uses an invalid security certificate. The certificate expired on 12/10/2015 05:59 PM. The current time is 05/11/2016 01:39 AM. Error code: SEC_ERROR_EXPIRED_CERTIFICATE

This is what it is shown:

"This server could not prove that it is www.popsci.com; its security certificate expired 153 days ago. This may be caused by a misconfiguration or an attacker intercepting your connection. Your computer's clock is currently set to Wednesday, May 11, 2016. Does that look right? If not, you should correct your system's clock and then refresh this page."

How are you connecting to the site? Genuinely curious as it definitely does not support HTTPS which the sibling comments confirm. Are you on a work computer with proxied MITM certificates, maybe some badly-configured security software (like Superfish), or something else? It would be good to know why this is happening.

I don't get HTTPS :( http://i.imgur.com/TByP8XM.png?1

dbalan's explanation is quite legit. Hope they get there.