Edit: I just noticed moot's comment about disabling HTTPS Everywhere. The XML has an exclusion for "status" but not "blog". I'll send a pull request.