assets hosts uses https