the downloads are served via mirrors also over ftp - so you gain nothing with ssl there
We serve hashsums via ssl that could be used to check for correct files (reminds me to add the links to the download, upps).
Remember also Windows updates are server via http and it is not less secure due that!