Internet websites shouldn't make use of the unsafe-url policy, as this will likely cause HTTPS URLs to get exposed to the wire above an HTTP relationship, which defeats one of several essential privateness and security assures of HTTPS. SSL/TLS is especially suited to HTTP, as it can offer some defense http://XXX