HTTPS: review before merge