bit of a trap question - clearly it doesn't need to, plenty of people accessed it in this thread fine and it works. even if it didn't, and there was a prevalent internet standard mandating it these days, you could just handwave it away, claiming that people don't need to respect standards.

"why do i expect it to?" i think would have been a lot less of a trick question, and that's simple: it's trivial to set up and offers security benefits people - i think reasonably - take for granted these days.