[doomtop]

I think because with plain http there should be no illusion of security.

[robryk]

Do you mean "we expect people not to have an illusion of security" or "we would want people not to have an illusion of security"?

I posit that this actually creates an illusion that http is better than "insecure" https.