3: HTTPS fixes