So, this update enables the use of HTTPS - but since it's delivered OTA, does that mean patches (including this one) were previously delivered over just HTTP, i

So, this update enables the use of HTTPS - but since it's delivered OTA, does that mean patches (including this one) were previously delivered over just HTTP, i.e. an unauthenticated, unencrypted channel?