Base layers use SSL where possible, added EOX