While old-school and a bit funny, not being on https while sporting downloads of something as significant as an operating system isn't what i would want to do. The internet isn't "fun" anymore and we need all security we can get or someone will exploit you.
For something as significant as an operating system, please always check the gpg signatures. Do not rely on transport security.
Plus the downloads are served by mirrors and torrents anyway.