no https for xdi.ninja