Download over SSL?

[pc]

I'm rather confused as to why the download links on the bitcoin.org home page aren't downloading the client over SSL? Especially with known trojans out there, it seems like needing to trust the ISPs between you and the download server (or your tor exit node if downloading over tor) is a piece of trust that shouldn't be needed. I understand that people could (and should) check the checksum with that posted on this forum, but if enabling SSL for the download is easy, it seems like it would help give users confidence that they have the official client, particularly users that are less technical.

And if it's not easy to set up with SourceForge, perhaps the downloads should be mirrored somewhere where it is easy?