[meroliph]

If it was a secure page it would be a-okay, right?

[sp332]

At least you would know who it's from. Otherwise anyone could phish you or MITM and send you any executable they want.

[ben_straub]

You still know who it's from, just look at the signature: http://i.imgur.com/Icz56.png

[stilus]

If the https would not redirect you to the http, it would at the very least be marginally(!) better...