I think we shouldn't do this -- many/most `https://` sites will auto-redirect `http://` to `https://`, but few will do the reverse, if SSL is unsupported.