Is there a reason the site doesn't support HTTPS? For a distro offering ISO downloads, this seems like a meaningful security gap -> it makes MITM attacks trivial for anyone on the network path.