Whoops; fix prefix comparison
Protocol change: allow only http->https