If we're going to default this to a specific protocol for file:// purposes, I'd default this to https so that anyone using these resources on a site with https don't run into mixed content warnings.