People generally prefer https for downloads

SSL is now GA from Maven Central so might as well use it :)