Allow HTTPS endpoints