- Increased resistance to surveillance. Instead of seeing the pages/information that a client downloads from your server, state actors, ISPs, local attackers, and anyone else listening only learn that the client downloaded some bytes from your server.
- Mitigation of man-in-the-middle and man-on-the-side attacks against your website. These can be as simple as someone attacking a local open Wi-Fi access point to sophisticated attacks like the Chinese DDoS against GitHub and the NSA's QUANTUM INSERT. Potential attacks range from replacing/rewriting information to attacking client machines with browser exploits.
- Better SEO rankings, Google weighs HTTPS sites higher than their equivalent insecure plaintext.
If you need a shared host that supports HTTPS, take a look at DreamHost, they have a free one-click Let's Encrypt integration.