Lots of people still have the mindset that http is the default and https signals a high level of trustworthiness. What we're shifting towards (and maybe alread

Lots of people still have the mindset that http is the default and https signals a high level of trustworthiness. What we're shifting towards (and maybe already are there) is https is default, and an http-only site is an amateur setup, on the same level as hosting your site via IP (no domain name at all) or with a url like http://myisp.net/~mycompany/default.htm http://myisp.net/~mycompany/default.htm. Like it or not, browsers are treating sites like this now, and you don't see many "Secured by TrustworthyCo SSL" golden padlock badge images anymore.