Always target HTTPS.