WordPress.com enables HTTPS with Let's Encrypt for new hosted sites with custom domains, will soon expand support to 1M+ sites currently using custom domains
HTTPS Everywhere: Encryption for All WordPress.com Sites — Today we are excited to announce free HTTPS for all custom domains hosted on WordPress.com.