I don't think that these basepath settings should be a requirement as secure pages will fallback to the default site address. Which is very useful when using the same DB on different machines.

It there any security problems in not have these required that I'm missing ?