Why adapt to http only and not https?