[bigfatkitten]

The IP stack and HTTP clients are problematic enough without adding the enormous complexity of a TLS implementation on top.

[naturalmovement]

They have a hard enough time managing the relatively few certificates for secure boot.

You want me to believe all the various BIOS manufacturers are going to competently manage a WebPKI root certificate program?