Small language improvements. Add missing firsterm markup. Fix HPKP link.
Tweak language.
Improve ECDSA coverage and explicitly recommend 256-bit ECDSA keys.
Improve the public key pinning section. Remove TACK.
IE will soon support HSTS.
Use plaintext, not plain-text.
Move OCSP Stapling from the Advanced section to its own section 3.5.
Update the changelog for OCSP.
Expand Section 3.1 to cover the strength of the DHE and ECDHE key exchanges.
Improve the RC4 and BEAST sections.
Improve 3DES advice.
Improve the RC4 advice.
Improve protocol advice, recommending that SSL v3 is not used.
Mention POODLE.
Mention that certificate sharing enables vulnerability transfer from one site to another.
Discuss SHA1 deprecation.
Improve private key protection advice.
Tweak heading font sizes.
Update the version number to 1.4.