Why does Ask Ubuntu use plain ol' HTTP?
In this day in age, I don't see any reason why it shouldn't be HTTPS.
Isn't this a huge security risk?
They (Stack Exchange developers) are working on it. It's complicated.
Main sites are already usable via HTTPS. Meta sites are not, and will not be until the domain structure is changed. For details, see