Comment by mholt

> if you provide an IP:port instead of a hostname

That still gets served over HTTPS.

The only time HTTPS isn't used is if a host portion is missing entirely (IP or name).