Use `https` where possible