HTTPS clarification in docs