Old school? Old school was when you could put up a harmless, noncommercial, mostly static HTML web site and run it over plain http without being considered some info security risk outlier.

I have one of these web sites. After some coaching from a modern web literate colleague, it now autopromotes to https using a LE certificate. It works. Or does it? Half my relatives who access a (private and password protected) photo server promptly reported losing access. This is the still using 32-bit Chrome on Windows XP, save a password in a browser once and then never think about it again, kind of crowd.