@PopRe Are you still interested in working on this?

Not really necessary now as all traffic is forwarded to https on the site

http://www.popre.net doesn't redirect to https for me.

Whoops, it does now - just got to it this week for a few related sites

Of course you don't have to submit a ruleset, but FYI domains that redirect to HTTPS are still valid targets for HTTPS Everywhere (see here). You could also look into HSTS preloading your site (see here).

Also, consider marking your cookies as "isSecure" or "HTTPS only" or equivalent. This is what our securecookie attribute does (see here).

Anyway, thanks for responding so quickly.