@Gargron You can always use something else to terminate TLS before it reaches your web server. Either use stunnel that was made for those things or a reverse proxy like nginx,
@Gargron Site.js (https://sitejs.org) by @aral tries to bring back that 'anyone can do it' spirit mentioned in the article. It's pretty cool, however not very popular so far.