Web-sites mustn't use the unsafe-url policy, as this can cause HTTPS URLs to generally be uncovered about the wire around an HTTP connection, which defeats on the list of essential privateness and safety assures of HTTPS. Also, some absolutely free-to-use and paid out WLAN networks are already observed tampering with http://XXX