mozilla-services/android-sync — comment on commit cbe50d6cfc4814ce7536e4ba04b0a98a9886b24f
File: src/main/java/org/mozilla/gecko/sync/setup/Constants.java line 60
By liuche:

I had moved it to the authentication stages, but good point, it should be https even before that, including creating an account.