Old sites get HTTPS during transition