Its the webserver TLS configuration. And yes I've pinged quitter.se . Do compare with https://www.ssllabs.com/ssltest/analyze.html?d=loadaverage.org for an example of good practice. User privacy is at stake