This file is available over https, should we just default to that?