Git supported push via "dumb" HTTPS using WebDAV for a very long time, and from some time support push via "smart" HTTP protocol (with a CGI script, that runs git-receive-pack / git-upload-pack, e.g. git-http-backend).
As with push via SSH Git left security to SSH, with push via HTTPS Git leaves security to HTTPS / web server configuration.