EFForg/https-everywhere — pull request #180 by jmorahan (2014-03-06 01:10:22+00:00)
Title: [NewsBlur] Secure the domain cookie

Missed this one: there's a session cookie for host=.newsblur.com that's not secured by default.