Ask HN: Why doesn't Microsoft update website use SSL/TLS? (update.microsoft.com)

Thanks for pointing out. If the updates site does use some sort of certificate pinning for IE, I wonder why the browser pops up the following warning before running the Microsoft update add-on: "If you trust this website...click here..."