Sites must not make use of the unsafe-url coverage, as this tends to result in HTTPS URLs to generally be uncovered over the wire over an HTTP relationship, which defeats one of the essential privacy and security assures of HTTPS. HTTP will be the avenue through which information is distributed http://XXX