everything should be ssl friendly