TLS on this site has always been enabled, but with a self-signed certificate. I finally went out and got a proper certificate so now I feel better enabling HTTPS as the default. You may still find some HTTP content here or there as I finish the conversion.