Comment by ctdean

What's the threat model for serving a read-only, public, marketing site over http? Or is it just a general principle?