mirror served over HTTPS