be more protocol neutral (be nice w.r.t. HTTPS)