Internet sites should not use the unsafe-url policy, as this will bring about HTTPS URLs to be exposed to the wire above an HTTP connection, which defeats on the list of vital privacy and stability ensures of HTTPS. SSL/TLS is especially suited for HTTP, because it can offer some defense http://XXX