ba uses https url