http/https protocol enforcement