#http vs https handling