It's not exactly a confidence booster for the testers to see the ISOs, checksums and whatnot on a non-https server. http://cdimage.ubuntu.com/kubuntu/daily-live/current/SHA256SUMS. For safety reasons, I suggest to have the SHA256 sum of the daily builds on https, even if that means the Kubuntu main download page.