On: Don't Take Security Advice from SEO Experts or Psychics

[jjude]

Whatever Troy says is true. But for bloggers, please know this. The RSS 2.0 spec specifies that the feed url must be http url (and not https). So if you want your feed url should validate (which is a requirement for certain aggregators like AllTop), then it has to be http.

I wrote my experience of moving my blog to https about it here: https://jjude.com/cost-of-https/

[cratermoon → jjude]

That's incorrect. Prior to 2.0 yes, but since 2.0 https is allowed. see https://validator.w3.org/feed/docs/rss2.html in the Comments section.

[jwilk → jjude]

RSS is a terrible format. You should use Atom feeds.