for testing, we set SECURESYNC_PROTOCOL to "http" in local_settings, as test servers rarely have https available.
So, that setting is what should be used when the protocol is desired.  Otherwise, testing cannot proceed (except on the central server, which I argue is "bad", but also not available for most developers)