Update WHATWG URLs

https://blog.whatwg.org/rolling-out-tls-and-hsts