Comment by wavesquid

Historically?

1. Because TLS certificates were not free

2. Because firewall was "enough" in most people's minds

3. Because TLS was the most CPU intensive part of serving a static site

4. Because some people were using cheap shared hosting providers that upcharged for TLS