This is a very helpful post.
Unfortunately I've not figured out what to do about the thousands of posts containing images hosted outside of our domain, and not on https.
I've noticed some browsers get really ticked off when you have mixed secure/non-secure content.
