is it worth doing this over https?