Internet sites should not use the unsafe-url plan, as this will lead to HTTPS URLs to be uncovered over the wire over an HTTP link, which defeats one of many essential privateness and protection guarantees of HTTPS. SSL/TLS is particularly suited for HTTP, as it can offer some defense whether http://XXX