I'm not sure that 1996-era HTTP server software was "secure as hell" even if serving static content. Browsers certainly were not.