[Editorial] WHATWG URLs are HTTPS-only now.