No longer overspecify (works on HTTPS)