Server maintenance landing page - can it be on HTTP?
Yes, you should use HTTPS in your maintenance server.
- people use bookmarks
- browsers show HTTP as insecure
- Browsers start using HTTPS as default if no protocol is specified
- if your server provides HSTS headers (which it should) the browsers which visited your server before will show big security warnings and reject to talk to your server