Web-sites shouldn't make use of the unsafe-url plan, as this could cause HTTPS URLs to be exposed around the wire above an HTTP connection, which defeats among the vital privacy and safety assures of HTTPS. HTTPS is currently the preferred protocol for all activity on the Web, as it's the http://XXX