Encrypt HTTP, not all (to be verified?)