doesn't this only test https now