https://www.eff.org/deeplinks/2015/04/the-federal-https-only-standard