Is this really a problem? Aren't all of the API methods limited to https?