This is no longer true, we have SSL endpoints