I would not force `https`, it's not correct IMO and adds more problems than it solves.