Web-sites mustn't make use of the unsafe-url policy, as this will induce HTTPS URLs being exposed around the wire around an HTTP link, which defeats one of many essential privateness and safety assures of HTTPS. HTTP operates at the very best layer of your TCP/IP product—the appliance layer; as does http://XXX