add note about insecure connections, #65