SSL is being turned on by default for all Tumblrs that use our Official theme on the web, except those with custom domains. Because, well…Optica is the default theme, and why shouldn’t secure be the default?
This change only affects the web, because the mobile apps already use SSL all the time for your safety.
We don’t recommend it, but if for some reason you need to disable SSL, you can do so via your blog settings on the web, by turning off the “Always serve blog over SSL” option.
Update to the update: Now SSL is available for blogs with custom domains, too. To turn it on, go to your blog settings and enable “Always serve blog over SSL.” Once you’ve done that, it takes a while (typically less than a day) for the SSL on custom domains to activate. We’ll send you an email when it’s ready.
