Web sites should not utilize the unsafe-url plan, as this will likely trigger HTTPS URLs to be exposed on the wire over an HTTP relationship, which defeats one of many important privateness and security ensures of HTTPS. Over the transit involving the browser and the world wide web server, HTTPS http://XXX